Senior Software Engineer Product Security
Rockwell Automation3 days ago
Pune, India or Bengaluru, IndiaSenior
Responsibilities
- Develop software components, services, and tools supporting product security programs.
- Apply secure coding practices and security-by-design principles throughout the software development lifecycle.
- Participate in feature design, implementation, testing, deployment, code reviews, and design reviews.
- Support threat modeling, security reviews, vulnerability remediation, risk mitigation, and resolution of security findings.
- Develop automation that improves security, compliance, and engineering productivity.
- Build and maintain cloud, web, desktop, or distributed application components.
- Integrate security requirements and security tooling into product designs, implementations, and CI/CD pipelines.
- Investigate and resolve software defects, performance issues, and security findings.
- Create technical documentation, test plans, and engineering artifacts.
- Use generative AI tools responsibly to improve development efficiency, code quality, testing, documentation, and workflows.
- Collaborate with globally distributed software engineering, architecture, product security, and DevSecOps teams.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Software Engineering, Cybersecurity, Electronic & Communication Engineering, or equivalent practical experience.
- Knowledge of product security and DevSecOps, including secure software development lifecycle practices.
- Understanding of common software vulnerabilities and mitigations, including OWASP Top 10, CWE, and secure coding practices.
- Familiarity with threat modeling and security risk assessments.
- Experience developing software with one or more modern programming languages such as C#, C++, Java, Python, Go, or TypeScript.
- Experience working in Agile development environments.
- Preferred: 5+ years of software development experience.
- Preferred: experience with cloud, web, desktop, or distributed systems and object-oriented design, data structures, algorithms, and design patterns.
- Preferred: experience with TypeScript, Node.js, Angular, React, GraphQL, Windows, Linux, Git, GitHub, Azure DevOps, CI/CD pipelines, and automated testing.
- Preferred: knowledge of authentication, authorization, encryption, security protocols, security scanning tools, and standards such as IEC 62443, NIST SSDF, CRA, or NIS2.
- Preferred: experience with generative AI tools and understanding of prompt engineering, code generation, automated testing, documentation workflows, LLMs, RAG, agentic workflows, and AI-enabled developer tooling.
- Preferred: experience evaluating AI-generated outputs for quality, security, maintainability, and compliance with secure development standards.
- Ability to collaborate with geographically distributed teams and stay current with technology, cybersecurity, and software engineering practices.
Benefits
- Hybrid work in Bangalore or Pune, with employees generally expected to work from a Rockwell location on Mondays, Tuesdays, and Thursdays unless business obligations require otherwise.
- Paid time off is available after six months of employment for eligible employees.
- Premium Calm membership and comprehensive mindfulness programs.
- Company volunteer and donation matching program.
- Employee Assistance Program.
- Personalized wellbeing programs through OnTrack.
- On-demand digital course library for professional development.
- Additional local benefits may apply.
About Rockwell Automation
Rockwell Automation builds industrial control hardware and factory software for manufacturers, and sells services and systems to design, operate, and maintain automated plants. Its Allen-Bradley controllers, drives, and safety products pair with FactoryTalk software and MES to support discrete and process industries. Founded in 1903 and headquartered in Milwaukee, it is a public company on the NYSE (ROK) with global sales, partners, and OEM customers.