Product Security Software Engineer

AVEVA•Philadelphia, PA

1d•Hybrid

About The Position

As part of AVEVA’s Product Security organization, the Product Security Software Engineer designs, implements, and maintains secure infrastructure and automation that enables development teams to build trusted products. The role works closely with engineering, architecture, and DevSecOps teams to integrate security tooling, improve compliance with ISA/IEC 62443 standards, and support secure software delivery at scale. The position is based in Philadelphia. AVEVA works in a hybrid way for most roles, generally expecting employees to be onsite 50% of their working hours, but the specific arrangement for this position will be confirmed during the hiring process.

Requirements

Demonstrated experience designing secure infrastructure and automating security processes in modern development environments.
Experience working with cloud platforms, infrastructure-as-code, CI/CD pipelines, or containerized environments.
Understanding of security assessment, risk management, and secure software delivery practices.
Comfort working with security monitoring, logging, and vulnerability management solutions.

Nice To Haves

Familiarity with ISA/IEC 62443, industrial cybersecurity, or compliance-focused environments.
Strong collaboration skills and ability to build relationships across Product Security, DevSecOps, IT, and development teams.
Curiosity and willingness to learn new technologies, tools, and practices.
Passion for solving complex engineering problems, investigating risks, improving automation, and supporting secure engineering practices.

Responsibilities

Design, build, and maintain secure infrastructure, CI/CD components, and security services that support product development.
Integrate and automate security tools to improve vulnerability management, compliance reporting, and developer workflows.
Collaborate with product teams to embed security requirements and secure-by-design practices throughout the software development lifecycle.
Monitor infrastructure security, support incident response activities, and drive continuous improvement of security controls.