We are seeking a experienced Staff Security Software Engineer to lead and strengthen our software security practices across the development lifecycle. You will design, implement, and maintain security measures to protect our software systems from threats. You will collaborate with software engineers, product teams, and security experts to embed security into the development process and ensure that our applications meet the highest standards of safety and compliance.
Responsibilities:
Lead the design and development of security features and tools that protect our software products from security vulnerabilities and cyber threats.
Develop proof-of-concept, conduct threat modelling, security design and code reviews, and vulnerability assessments to identify and mitigate potential risks to meet the security requirements of the product.
Establish a timeline and estimate the resources needed to execute a design. Consider tradeoffs between requirements, speed, cost and vulnerability in the choice of a design approach. Provide progress reports, as needed.
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
Develop and maintain automated security testing frameworks and tools to continuously monitor and enhance the security of our software.
Implement secure coding practices and ensure adherence to security guidelines and standards.
Lead incident response activities related to software vulnerabilities, security breaches, and other security incidents.
Provide mentorship and technical leadership to engineering teams on security-related topics.
Stay informed of emerging security threats, vulnerabilities, and the latest security technologies.
Perform security audits, risk assessments, and relevant testing to ensure compliance with regulatory and security requirements.
Create and maintain documentation for security practices, tools, and configurations.
Think outside the box and be willing to research and explore new avenues to by utilizing the latest technologies and standards.
Communicate and convey design concepts, both verbally and in writing.
Understanding of Complex control system concepts.
Qualifications:
Bachelors degree in computer science, Computer Engineering, Cybersecurity, or equivalent
10+ Years of experience in a software product development with a focus on product security
Strong knowledge of security principles, encryption algorithms, authentication methods, and secure coding practices.
Proficiency in C/C++ or Kotlin/Java and knowledge of secure coding techniques
Hands-on experience with security frameworks and tools such as OWASP, SAST, DAST, or similar
Understanding of network security, authentication protocols (OAuth, SAML, etc), and key management
Strong problem-solving skills and attention to detail in identifying and addressing security risks
3 years of experience as technical lead in a medium-sized team
Other Qualifications:
Experience with vulnerability scanning tools, penetration testing, and threat modelling
Strong knowledge of RTOS (QNX) and interaction between RTOS and user applications, such as linking and loading
Familiarity with security in cloud environments (AWS, Azure, Google Cloud) and modern technologies (microservices, containers, Kubernetes)
Direct experience with the Industrial Automation industry will be an advantage
Direct experience collaborating with local and global technical development teams
Excellent interpersonal, verbal and written communication skills
Benefits:
The ability to collaborate with, learn from colleagues in a complex, global organisation.
We provide a working environment with a creative company, paired with a great compensation package, great benefits, and a supportive atmosphere where you can sharpen with new challenges and development opportunities.
Hybrid work-from-home and at a determined Rockwell Automation facility.
Corporate Social Responsibility opportunities,
Support from our 24/7 employee assistance program.