Software Engineer - Product Security

Rockwell Automation•Mayfield Heights, OH

4d•Hybrid

About The Position

As a Software Engineer – Product Security, you will join a globally distributed software security team that ensures Rockwell Automation products are designed, developed, and maintained using industry-leading secure development practices by helping. This team supports Studio 5000 Logix Designer, Rockwell Automation's flagship engineering software platform used to configure, program, and maintain industrial control systems. You will work with software developers, test engineers, architects, product security engineers, and DevSecOps teams to improve product security throughout the software development lifecycle. Depending on our priorities, responsibilities may include both hands-on software engineering activities within Studio 5000 Logix Designer and Product Security Engineering activities supporting a diverse portfolio of Rockwell Automation products. You are interested in cybersecurity and secure software development and enjoy solving complex engineering challenges. You motivate yourself to improve software quality, security, engineering productivity, and customer outcomes. You will report to the Engineering Team Lead and work in a hybrid environment from either our Mayfield Heights, Ohio or Milwaukee, Wisconsin locations.

Requirements

Bachelor's Degree or Equivalent Years of Relevant Work Experience
Legal authorization to work in the U.S. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Nice To Haves

Typically requires 5 years of related experience.
3+ years of experience developing, testing, and maintaining production software systems using C++, C#, or similar object-oriented programming languages.
Experience with desktop application development, Windows-based software systems, or automated testing frameworks.
Experience managing complex software systems, engineering tools, desktop applications, or industrial automation software.
Experience with Git-based source control systems, CI/CD pipelines, automated testing, and modern software development workflows.
Knowledge of secure software development lifecycle (SSDLC) practices.
Understanding of common software vulnerabilities and mitigations (OWASP Top 10, CWE, secure coding practices).
Familiarity with threat modeling concepts and conducting security risk assessments for software products.
Knowledge of authentication, authorization, encryption, and security protocols.
Exposure to DevSecOps practices and security scanning tools such as SAST, SCA, DAST, SBOM, or similar software assurance technologies.
Understanding of secure software development and regulatory compliance requirements.
Familiarity with modern software engineering practices, including AI-assisted software development, automated testing and code generation.
Familiarity with modern C++ development practices and contemporary language standards (C++17, C++20, or later).

Responsibilities

Contribute to the design, testing, and maintenance of Studio 5000 Logix Designer software and related engineering solutions.
Participate in software design reviews, code reviews, testing, troubleshooting, and deployment activities.
Apply secure coding practices and security-by-design principles throughout the software development lifecycle.
Support threat modeling, security reviews, vulnerability remediation, risk assessment, and security assurance activities.
Collaborate with global software engineering teams to integrate security requirements into product designs and implementations.
Evaluate AI-generated outputs for quality, security, maintainability, and compliance with secure development standards.
Contribute to technical planning, prioritization, and execution that supports product and security goals.