Product Security Engineer

Davita Inc.; Mayfield Heights (OH); Hybrid; USD 90,000 - 130,000; Full time

Job summary

A leading company in technology solutions seeks a Product Security Engineer to oversee security development lifecycle compliance for digital and platform products. The role involves implementing security policies, overseeing product security controls, and engaging in vulnerability assessments. A Bachelor's degree and several years of relevant experience are essential for candidates interested in this impactful position that contributes to the security of global manufacturing technologies.

Benefits

Health Insurance including Medical, Dental and Vision

401k

Paid Time off

Parental and Caregiver Leave

Flexible Work Schedule

Qualifications

• Bachelor's degree required; Computer Science background preferred.
• Minimum of 5 years related experience preferred.
• Familiarity with security standards and regulations is a plus.

Responsibilities

• Support implementation of security policies and standards across the DPT portfolio.
• Guide product implementation of security controls and threat modeling.
• Manage vulnerability assessment process for the DPT business unit.

Skills

Security Policies

Threat Modeling

Python

Vulnerability Assessment

Continuous Integration

Education

Bachelor's degree in relevant field

Bachelor's degree in Computer Engineering, Computer Science, Cyber Security, or Electrical Engineering

Tools

Burp Suite

Peach Fuzzer

Job description

Milwaukee, Wisconsin, United States
Mayfield Heights, Ohio, United States

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility -our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

Product Security Engineer

As a Product Security Engineer, you will lead Digital & Platform Technologies (DPT) Business Unit products in meeting Rockwell Security Development Lifecycle (SDL) requirements. This includes providing guidance and oversight of individual teams, as well as developing tools and documentation related to security requirements compliance. You will report to the Product Security Leader and work onsite in Milwaukee, WI or Mayfield Heights, OH.

Your Responsibilities:

• Support implementation of security policies and standards across the DPT portfolio.
• Guide and review product implementation of security controls, threat modeling and security activities such as fuzz testing, SAST, etc.
• Manage vulnerability assessment process for the DPT business unit.
• Perform security reviews of product architectures and implementations. Provide expertise and guidance to teams on security-related issues.
• Contribute to the development and improvement of Rockwell security policies and procedures.

The Essentials - You Will Have:

• Bachelor's degree in relevant field.
• Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

The Preferred - You Might Also Have:

• Typically requires a minimum of 5 years of related experience.
• Bachelor's degree in Computer Engineering, Computer Science, Cyber Security, or Electrical Engineering with a Computer Science emphasis.
• Familiarity with software security verification and validation techniques such as threat modeling, web application vulnerability scanning, or penetration testing.
• Experience with the application of Secure Development Lifecycle in product development.
• Experience using multiple programming techniques and scripting languages, particularly Python, including co-op/internship experience
• Experience with Source Code Review

• Familiarity with security standards and regulations like: IEC 62443, NIST Cybersecurity Framework, EU Cyber Resilience Act, US SSDF.
• Experience with threat modeling software products
• Experience with embedded software development and testing.
• Experience programming in object-oriented languages like C++, including co-op/internship experience.
• Experience working in a Continuous Integration/DevOps environment.
• Experience using software security testing tools such as Burp Suite, Peach Fuzzer, including any co-op/internship experience.

What We Offer:

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
• To learn more about our benefits package, please visit at www.raquickfind.com.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-PD1

#LI-Hybrid

#lifeatrok

We are an Equal Opportunity Employer including disability and veterans.

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at [phone].

Rockwell Automation's hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.