Software Engineer - Product Security
About the role
Join a globally distributed software security team that ensures Rockwell Automation products are designed, developed, and maintained using industry-leading secure development practices. This team supports Studio 5000 Logix Designer, Rockwell Automation's flagship engineering software platform used to configure, program, and maintain industrial control systems. You will work with software developers, test engineers, architects, product security engineers, and DevSecOps teams to improve product security throughout the software development lifecycle.
Depending on priorities, responsibilities may include both hands-on software engineering activities within Studio 5000 Logix Designer and Product Security Engineering activities supporting a diverse portfolio of Rockwell Automation products. You will report to the Engineering Team Lead and work in a hybrid environment from either our Mayfield Heights, Ohio or Milwaukee, Wisconsin locations.
Responsibilities
- Contribute to the design, testing, and maintenance of Studio 5000 Logix Designer software and related engineering solutions.
- Participate in software design reviews, code reviews, testing, troubleshooting, and deployment activities.
- Apply secure coding practices and security-by-design principles throughout the software development lifecycle.
- Support threat modeling, security reviews, vulnerability remediation, risk assessment, and security assurance activities.
- Collaborate with global software engineering teams to integrate security requirements into product designs and implementations.
- Evaluate AI-generated outputs for quality, security, maintainability, and compliance with secure development standards.
- Contribute to technical planning, prioritization, and execution that supports product and security goals.
Requirements
- Bachelor's Degree or equivalent years of relevant work experience.
- Legal authorization to work in the U.S. (We will not sponsor individuals for employment visas for this job opening).
Qualifications
- Typically requires 5 years of related experience.
- 3+ years of experience developing, testing, and maintaining production software systems using C++, C#, or similar object-oriented programming languages.
- Experience with desktop application development, Windows-based software systems, or automated testing frameworks.
- Experience managing complex software systems, engineering tools, desktop applications, or industrial automation software.
- Experience with Git-based source control systems, CI/CD pipelines, automated testing, and modern software development workflows.
- Knowledge of secure software development lifecycle (SSDLC) practices.
- Understanding of common software vulnerabilities and mitigations (OWASP Top 10, CWE, secure coding practices).
- Familiarity with threat modeling concepts and conducting security risk assessments for software products.
- Knowledge of authentication, authorization, encryption, and security protocols.
- Exposure to DevSecOps practices and security scanning tools such as SAST, SCA, DAST, SBOM, or similar software assurance technologies.
- Understanding of secure software development and regulatory compliance requirements.
- Familiarity with modern software engineering practices, including AI-assisted software development, automated testing, and code generation.
- Familiarity with modern C++ development practices and contemporary language standards (C++17, C++20, or later).
Benefits
- Health Insurance including Medical, Dental, and Vision
- 401k
- Paid Time off
- Parental and Caregiver Leave
- Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life
Schedule
Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.