Senior Product Security Engineer - PSIRT

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility -our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

Join Rockwell Automation's growing team in the Office of Product Safety and Security (OPSS) as a Senior Product Security Engineer. This driven team of passionate individuals ensures our products and solutions are delivered with security to protect our customers and the critical services they provide. As a Senior Product Security Engineer, you will report directly to the Product Security Incident Response Team (PSIRT) Manager and will contribute to our PSIRT capabilities globally. The PSIRT coordinates all product security incidents and vulnerabilities, including leading the resolution and disclosure functions to our customers and downstream users. The work is rewarding, diverse, and has executive level visibility.

This role is has a hybrid work schedule.

Product Security Engineer responsibilities include:

• Build the vulnerability response process for Rockwell Automation products observing ISO/IEC 29147 and 30111
• Triage reported vulnerabilities from a variety of sources and coordinate response actions with partners including internal teams, government CERT teams, and external researchers
• Work with product teams, development teams, product security team members, customer support, legal and external security researchers to ensure resolution of security vulnerabilities or reports.
• Coordinate incidents, post-exploitation, and other reported security issues
• Advise and partner with product teams on performing risk analysis, mitigation and remediations related to product security vulnerabilities
• Contribute to risk reviews and risk analysis to identify systematic issues
• Interact with customers on security questions related to Rockwell Automation products

The Essentials- you will have:

• Bachelor's Degree
• Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

The Preferred- you might also have:

• Degree in Computer Science, Engineering or equivalent
• Typically requires a minimum of 5 years experience in product security incident response or supporting vulnerability disclosure programs
• Familiar with Incident Command Systems
• 1year of experience in incident response activities
• Familiarity with CVE rules and procedures for CNAs to assign vulnerability IDs.
• Experience coordinating with external researchers and third-party reporting organizations (ie./ CISA, national level CERTs, etc)
• Track numerous cases in parallel

What We Offer:

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
• To learn more about our benefits package, please visit at www.raquickfind.com.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-PD1

#LI-Hybrid

We are an Equal Opportunity Employer including disability and veterans.

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.

Rockwell Automation's hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.