Product Security Leader

Rockwell Automation; Pune District; Hybrid; INR 3,500,000 - 5,500,000; Full time

Benefits offered by this job

Mindfulness program

Volunteer time off

Donation matching

Employee assistance

Wellbeing program

Online courses

Job summary

Rockwell Automation is a global technology leader seeking a Product Security Leader for Product Automation. You will coordinate security efforts across PA, establish standards, and drive world-class security practices in our products.

This role reports to the Director, Logix Architecture and operates with a global, hybrid team in Pune. Ideal candidates have 9+ years of experience, a strong track record in Security Development Lifecycle concepts, and a mix of hardware, firmware, and software

Qualifications

• Bachelor's degree required.
• 9+ years of experience desired.
• 2+ years of experience in Security Development Lifecycle concepts (secure code reviews, threat modeling, penetration testing).

Responsibilities

• Be a security specialist within Rockwell Automation and educate internal personnel.
• Provide guidance on product security risk and exposure to senior management.
• Create processes for managing vulnerabilities and track metrics of posture.
• Promote security principles across product groups and collaborate with security experts.
• Represent the department in customer presentations and meetings on security.
• Drive security roadmap with portfolio managers and work with a global remote team.

Skills

Security leadership

Security risk assessment

Threat modeling

Penetration testing

English communication

Education

Bachelor's degree in Computer Science, IT Engineering, Electrical Engineering, or equivalent

Job description

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

Summary: As a Product Security Leader (PSL) for the Product Automation (PA), you are the central authority for the department for the products assigned to you. You will coordinate PA product security efforts across Rockwell Automation and within PA. This includes awareness of the industry standards, and security best practices. This further includes establishing standards, processes, and guidelines within PA to establish world-class security in our products and institutionalising them within our practices. You will report to Director, Logix Architecture. You will work with the team spread across multiple geographies. You will work Hybrid at Pune

Your Responsibilities

• Be a security specialist within Rockwell Automation through educating internal personnel and influencing proper security development techniques and tools.
• Provide guidance to senior levels of management regarding product security risk and exposure.
• Create the process for managing vulnerabilities and their resolution. Provide periodic metrics demonstrating our vulnerability posture.
• Promote the proper application of security principles and techniques with product groups.
• Research current security trends in Industrial Control Systems, software, embedded systems, hardware design, cloud-to-edge, and application security. Collaborate with security experts to ensure proper security requirements are put in place.
• Participate and provide critical analysis in security exception reviews and then advocate/review those exceptions with senior management.
• Work with Digital Trust on security initiatives that the product groups need to participate in.
• Represent the department for customer presentations and meetings with regards to security.
• We are looking for an understanding of security in the IT and automation markets, competitive offerings, and customer needs to provide direction and implementation in Rockwell Automation control system products and services.
• Demonstrated leadership capabilities, creativity and strategic development.
• ability to work within a global remote team environment also critical to achieve the business objectives.
• Security roadmap with portfolio managers.

The Essentials - You Will Have

• Bachelor's degree in Computer Science, IT Engineering, Electrical Engineering, or equivalent.
• 9 or more years of experience.
• Typically requires 8+ years of related experience.
• 2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing).

The Preferred - You Might Also Have

• 5+ years of application and/or software/firmware development experience in a professional setting
• 2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing)
• Written and verbal skills in English
• Basic knowledge of industrial control systems
• Demonstrated knowledge in the application of both software/embedded software engineering and security principles, theories, concepts, and techniques.
• Demonstrated knowledge in the application of both cloud-based software security principles.
• Demonstrated knowledge of hardware engineering security principles, theories, concepts, and techniques.
• Understanding and experience implementing security standards such as the NIST Cybersecurity Framework and/or IEC 62443
• Security certification(s) such as CISSP, CEH, Applicable GIAC Certifications, OSCP, CySec Specialist (TÜV Rheinland), or an advanced degree in cybersecurity.
• Knowledge of communication protocols Ethernet and/or Common Industrial Protocol (CIP), and modern microprocessor architectures.
• Advanced coursework and/or training related to secure software engineering, application security, cloud security, embedded systems, and/or securing operating systems.

What We Offer

Our benefits package includes …

• Comprehensive mindfulness programs with a premium membership to Calm
• Volunteer Paid Time off available after 6 months of employment for eligible employees.
• Company volunteer and donation matching program - Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.
• Employee Assistance Program
• Personalized wellbeing programs through our OnTrack program
• On-demand digital course lib