Product Security Software Engineer

AVEVA•Philadelphia, PA

2d•$145,600 - $290,000•Hybrid

About The Position

As part of AVEVA’s Product Security organization, the Product Security Software Engineer designs, implements, and maintains secure infrastructure and automation that enables development teams to build trusted products. The role works closely with engineering, architecture, and DevSecOps teams to integrate security tooling, improve compliance with ISA/IEC 62443 standards, and support secure software delivery at scale. The position is based in Philadelphia. AVEVA describes its working model as hybrid, with most roles expected to be onsite 50% of working hours; the specific arrangement for this position will be confirmed during the hiring process. The stated salary range is $145,600 to $290,000, with final compensation varying according to work location, experience, skills, and relevant education or training.

Requirements

Demonstrated experience designing secure infrastructure and automating security processes in modern development environments.
Experience working with cloud platforms, infrastructure-as-code, CI/CD pipelines, or containerized environments.
Understanding of security assessment, risk management, and secure software delivery practices.
Comfort working with security monitoring, logging, and vulnerability management solutions.

Nice To Haves

Familiarity with ISA/IEC 62443, industrial cybersecurity, or compliance-focused environments.
Ability to collaborate across Product Security, DevSecOps, IT, and development teams, build strong relationships, and help others succeed.
Curiosity and willingness to learn new technologies, tools, and practices.
Passion for solving complex engineering problems, investigating risks, improving automation, and supporting secure engineering practices.

Responsibilities

Design, build, and maintain secure infrastructure, CI/CD components, and security services that support product development.
Integrate and automate security tools to improve vulnerability management, compliance reporting, and developer workflows.
Collaborate with product teams to embed security requirements and secure-by-design practices throughout the software development lifecycle.
Monitor infrastructure security, support incident response activities, and drive continuous improvement of security controls.