Product Security Lead

Rockwell Automation•Mayfield Heights, OH

1d•Hybrid

About The Position

As a Product Security Leader (PSL) for the Product Automation (PA), you are the central authority for the Business Unit for the products assigned to this individual. You will be responsible for coordinating PA product security efforts across Rockwell Automation and within PA. This includes awareness of the state-of-the-art, industry standards, and security best practices. This further includes establishing standards, processes, and guidelines within PA to establish world-class security in our products and institutionalizing them within our practices. You will report to Director, Logix Architecture. You will work Hybrid at either or RA office based out of Mayfield Heights, OH or Milwaukee Or Mequon, WI.

Requirements

Bachelor's degree in relevant field.
Legal authorization to work in the US is required.
We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Nice To Haves

Typically requires 8+ years of related experience.
Bachelor's degree in Security, Electrical Engineering, Computer Engineering, Computer Science or equivalent
5+ years of application and/or software/firmware development experience in a professional setting
2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing)
Written and verbal skills in English
Basic knowledge of industrial control systems
Demonstrated knowledge in the application of both software/embedded software engineering and security principles, theories, concepts, and techniques.
Demonstrated knowledge in the application of both cloud-based software security principles.
Demonstrated knowledge of hardware engineering security principles, theories, concepts, and techniques.
Understanding and experience implementing security standards such as the NIST Cybersecurity Framework and/or IEC 62443
Security certification(s) such as CISSP, CEH, Applicable GIAC Certifications, OSCP, CySec Specialist (TÜV Rheinland), or an advanced degree in cybersecurity.
Knowledge of communication protocols Ethernet and/or Common Industrial Protocol (CIP), and modern microprocessor architectures.
Advanced coursework and/or training related to secure software engineering, application security, cloud security, embedded systems, and/or securing operating systems.

Responsibilities

Be a security thought leader within Rockwell Automation through educating internal personnel and influencing proper security development techniques and tools.
Provide guidance to senior levels of management regarding product security risk and exposure.
Drive the process for managing vulnerabilities and their resolution.
Provide periodic metrics demonstrating our vulnerability posture.
Drive the proper application of security principles and techniques with product groups.
Research current security trends in Industrial Control Systems, software, embedded systems, hardware design, cloud-to-edge, and application security and collaborate with security experts to ensure proper security requirements are put in place.
Participate and provide critical analysis in security exception reviews and then advocate/review those exceptions with senior management.
Interact with Digital Trust on security initiatives that the product groups need to participate in.
Represents the business unit for customer presentations and meetings with regards to security.
Position requires an understanding of security in the IT and automation markets, competitive offerings, and customer needs to provide direction and implementation in Rockwell Automation control system products and services.
Demonstrated leadership capabilities, creativity and strategic development, and a proven ability to drive results.
Strong communication skills and an ability to work within a global remote team environment also critical to achieve the business objectives.
Security roadmap with portfolio managers.