Software Engineer - Product Security
About The Position
As a Software Engineer – Product Security, you will join a globally distributed software security team that ensures Rockwell Automation products are designed, developed, and maintained using industry-leading secure development practices. This team supports Factory Talk Design Studio. You will work with software development teams, architects, product security engineers, and DevSecOps teams to implement security capabilities, address vulnerabilities, automate security workflows, and improve the security posture of our products. We will provide you with opportunities to contribute across the software development lifecycle, from design and implementation through testing and maintenance. You are interested in cybersecurity and secure software development and enjoy solving complex engineering challenges. You will be reporting to the Engineering Team Lead and work in a hybrid environment from either our Mayfield Heights, Ohio or Milwaukee, Wisconsin locations.
Requirements
- Bachelor's Degree or Equivalent Years of Relevant Work Experience
- Legal authorization to work in the U.S. We will not sponsor individuals for employment visas, now or in the future, for this job opening.
Nice To Haves
- Typically requires 5 years of related experience.
- 3+ years' experience developing, testing, and maintaining production software systems in one or more modern programming languages such as Python, Go, or TypeScript.
- Experience with Node.js, MongoDB, Kubernetes, Helm, or similar technologies.
- Familiarity with REST APIs, microservices, containers, and cloud-native architectures.
- Experience with GitHub, Azure DevOps, CI/CD pipelines, and automated testing.
- Knowledge of secure software development lifecycle (SSDLC) practices.
- Understanding of common software vulnerabilities and mitigations (OWASP Top 10, CWE, secure coding practices).
- Familiarity with threat modeling concepts and conducting security risk assessments for software products.
- Knowledge of authentication, authorization, encryption, and security protocols.
- Exposure to DevSecOps practices and security scanning tools such as SAST, SCA, DAST, SBOM, or container security solutions.
- Understanding of secure software development and regulatory compliance requirements.
- Familiarity with AI-assisted software development, including modern developer tools, code generation, and workflow automation.
Responsibilities
- Contribute to cloud-native, web, desktop, or distributed application development.
- Support DevSecOps projects by developing automated solutions that integrate security tooling into CI/CD pipelines.
- Participate in design reviews, code reviews, testing, troubleshooting, and deployment activities.
- Apply secure coding practices and security-by-design principles throughout the software development lifecycle.
- Support threat modeling, security reviews, vulnerability remediation, risk assessment, and security assurance activities.
- Collaborate with global software engineering teams to integrate security requirements into product designs and implementations.
- Evaluate AI-generated outputs for quality, security, maintainability, and compliance with secure development standards.
- Contribute to technical planning, prioritization, that supports product and security goals.
Benefits
- Health Insurance including Medical, Dental and Vision
- 401k
- Paid Time off
- Parental and Caregiver Leave
- Flexible Work Schedule
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
