Software Engineer Product Security

Job description

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better. We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us! Job Description Job Summary: As a Software Engineer – Product Security, you will be part of a team responsible for helping ensure Rockwell Automation products are designed, developed, and maintained using industry-leading secure development practices. You will work closely with software development teams, architects, product security engineers, and DevSecOps teams to implement security capabilities, address vulnerabilities, automate security workflows, and improve the overall security posture of our products. You will provide opportunities to contribute across the software development lifecycle, from design and implementation through testing, deployment, and maintenance. You are a collaborative engineer who enjoys solving technical problems, learning new technologies, and working with globally distributed teams. In addition to software engineering fundamentals, you have an interest in cybersecurity, secure software development, cloud technologies, and new AI-assisted development practices. You will report to the SENIOR MANAGER, SOFTWARE ENGINEERING and have a hybrid schedule working in Bangalore or Pune, India. Your Responsibilities: Design, develop, test, and maintain software components, services, and tools supporting product security programmes. Apply secure coding practices and security-by-design principles throughout the software development lifecycle. Participate in feature design, implementation, testing, and deployment activities. Support threat modelling, security reviews, vulnerability remediation, and risk mitigation efforts. Develop automation solutions that improve security, compliance, and engineering productivity. Contribute to cloud-native, web, desktop, or distributed application development preferred. Collaborate with software engineering teams to integrate security requirements into product designs and implementations. Investigate, troubleshoot, and resolve software defects, performance issues, and security findings. Participate in code reviews, design reviews, and technical discussions. Create and maintain technical documentation, test plans, and engineering artefacts. Support DevSecOps projects by integrating security tooling into CI/CD pipelines. Use Generative AI tools responsibly to improve software development efficiency, code quality, testing, documentation, and engineering workflows. Continuously learn and stay current with latest technologies, cybersecurity threats, software engineering practices, and AIdriven development methodologies. Collaborate effectively with global and cross-functional teams. The Essentials - You Will Have: Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Cybersecurity, Electrical Engineering, or equivalent practical experience 2+ years of software development experience. Experience developing software using one or more modern programming languages such as C#, C++, Java, Python, Go, or TypeScript. Experience working in Agile development environments. The Preferred - You Might Also Have: Experience developing software for cloud, web, desktop, or distributed systems. Experience with object-oriented design principles, data structures, algorithms, and design patterns. Experience with TypeScript, Node.js, Angular, React, GraphQL, or similar technologies. Experience developing software on Windows and/or Linux platforms. Familiarity with REST APIs, microservices, containers, and cloud-native architectures. Experience with Git, GitHub, Azure DevOps, CI/CD pipelines, and automated testing. Product Security & DevSecOps Knowledge of secure software development lifecycle (SSDLC) practices. Understanding of common software vulnerabilities and mitigations (OWASP Top 10, CWE, secure coding practices). Familiarity with threat modelling concepts and security risk assessments. Knowledge of authentication, authorization, encryption, and security protocols. Exposure to DevSecOps practices and security scanning tools such as SAST, SCA, DAST, SBOM, or container security solutions. Understanding of security frameworks and standards such as IEC 62443, NIST SSDF, CRA, NIS2, or similar industry standards. Generative AI & Modern Engineering Practices Experience using Generative AI tools such as GitHub Copilot, ChatGPT, Claude, Cursor, or similar platforms to improve engineering productivity. Understanding of AI-assisted software development, prompt engineering, code generation, automated testing, and documentation workflows. Exposure to AI/ML concepts, LLMs, retrieval-augmented generation (RAG), agentic workflows, or AI-enabled developer tooling preferred. Evaluate AI-generated outputs for quality, security, maintainability, and compliance with secure development standards. What We Offer: Our benefits package includes … Comprehensive mindfulness programs with a premium membership to Calm Volunteer Paid Time off available after 6 months of employment for eligible employees Company volunteer and donation matching program – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation. Employee Assistance Program Personalized wellbeing programs through our OnTrack program On-demand digital course library for professional development ... and other local benefits! At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles. #LI-Hybrid #LI-SK2 Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.