Staff Product Security Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 25,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us

**Job Description**:
**Position Title**:Product Security Engineer (Staff/Senior)

We are looking for a passionate Product Security Engineer to join Rockwell Automation Asia Pacific Business Center.

You will be part of a newly formed Product Security Team in Singapore, with a focus on the security focused design, development, and test of software, embedded firmware and features for our products. You will also contribute to the overall product development, design, process, and tools.

You will be responsible for providing product security expertise to product development teams throughout all phases of our security development lifecycle. This role will lead development teams to drive consistent adoption of security practices, provide mentoring and guidance on designs, and lead efforts to address security issues across the portfolio to ensure that we are continuously increasing the security posture of our products and solutions.

**Key Responsibilities**:

- Performs security assessments of company products that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities.
- Leads or participates in security architecture and design review meetings. Review product architectures for security design gaps and vulnerabilities and consult with product teams to remediate or mitigate cyber risk.
- Lead efforts with the development teams to quantify residual product risk and identification of appropriate security controls.
- Responsible for setting the direction for security, both vulnerability remediation and features across the assigned portfolio.
- Provide architecture and best practices guidance in building secure products.
- Drive timely and effective resolution of vulnerability reports in support of PSIRT
- Provide secure best practices to development teams to achieve IEC 62443 product level certifications.
- Maintain current knowledge of security threats and vulnerabilities that could impact products.
- Provide product security related coaching/mentoring and security expertise.
- Ensure adherence to security standards and provide guidance and input to standards enhancements.
- Participate in standards and research opportunities outside of RA.

**Preferred Qualifications**:

- Bachelor’s degree in Computer Science, Engineering or equivalent
- At least 4+ year experience in one of security domains: Secure SW Engineering, HW Security, Embedded Security, Wireless/Mobile Security, and other related fields is preferred
- Experience working with development teams to review design, construct threat models and secure coding practices.
- Understanding of security by design principles and architecture level security concepts
- Basic knowledge of CI/CD and various SAST and DAST tools
- Industrial cybersecurity and/or information technology certifications such as (ISC)² CISSP, or CSSLP, SANS GICSP - or you are ready to obtain it in the near future.