Staff Software Security Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us

Job Description

Company Overview

Rockwell Automation, the world's largest company dedicated to industrial automation, makes its customers more productive and the world more sustainable. Throughout the world, our flagship Allen-Bradley® and Rockwell Software® product brands are recognized for innovation and excellence. When you choose Rockwell Automation, you join countless experienced employees who have helped us establish our leadership position in the automation industry over the past century.

When you join Rockwell Automation you become part of a diverse, inclusive and global community with experience with innovation and a place where you can partner with great minds and inspiring people.

You will report to Engineering manager, Software, based in Singapore.

Job Description

When you join our software engineering group, you become part of a team that believes in knowledge sharing and collaboration and that is committed to using reliable and well-thought-out engineering practices and technology to overcome any challenges.

Your Responsibilities:

- Lead the design of security features and tools that protect our software products from security vulnerabilities and cyber threats.
- You will Develop proof-of-concept, conducts threat modeling, security design and code reviews, and vulnerability assessments to identify and mitigates potential risks to meet the security requirements of the product.
- You will Establish a timeline and estimate the resources needed to accomplish a design. Consider tradeoffs between requirements, speed, cost and vulnerability in the choice of a design approach. Provide progress reports.
- You will Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
- You will Develops automated security testing frameworks and tools to monitor and enhance the security of our software.
- Implement secure coding practices and ensure adherence to security guidelines.
- Lead incident response activities related to software vulnerabilities, security breaches, and other security incidents.
- Provide mentorship and technical leadership to engineering teams on security-related topics.
- Stay informed of new security threats, vulnerabilities, and the latest security technologies.
- Perform security audits, risk assessments, and testing to ensure compliance with regulatory and security requirements.
- Create and maintain documentation for security practices, tools, and configurations.
- Think outside the box and be willing to research and explore new avenues to by using the latest technologies and standards.
- You can communicates and conveys design concepts, both verbally and in writing.
- Complex control system concepts.

The Essentials - You Will Have:

- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent
- Typically requires ten years of experience in a software product development with a focus on product security
- You have Knowledge of security principles, encryption algorithms, authentication methods, and secure coding practices.
- Proficiency in C/C++ or Kotlin/Java and knowledge of secure coding techniques
- Hands-on experience with security frameworks and tools such as OWASP, SAST, DAST, or similar
- Understanding of network security, authentication protocols (OAuth, SAML, etc.), and key management
- And attention to detail in identifying and addressing security risks
- You have at least Three years of experience as technical lead in a medium-sized team

The Preferred - You Might Also Have:

- You have Experience with vulnerability scanning tools, penetration testing, and threat modelling
- You are familiar with security in cloud environments (AWS, Azure, Google Cloud) and modern technologies (microservices, containers, Kubernetes)

What We Offer:

- Health Insurance including comprehensive In-patient coverage along with Top-up plans for voluntary coverage upgrade.
- Out-Patient benefits including clinical consultation, prescribed medication, telemedicine, health screening, dental & vision.
- Life and Accident Protection - covering death and disability due to natural cause, illness, and accident.
- Hybrid & flexible work options.