Rockwell Automation
At a Glance
Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.
We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!
Job Description
Job Summary:
As a Software Engineer – Product Security, you will be part of a team responsible for helping ensure Rockwell Automation products are designed, developed, and maintained using industry-leading secure development practices.
You will work closely with software development teams, architects, product security engineers, and DevSecOps teams to implement security capabilities, address vulnerabilities, automate security workflows, and improve the overall security posture of our products.
You will provide opportunities to contribute across the software development lifecycle, from design and implementation through testing, deployment and maintenance.
You are a collaborative engineer who enjoys solving technical problems, learning new technologies, and working with globally distributed teams.
In addition to software engineering fundamentals, you have an interest in cybersecurity, secure software development, cloud technologies, and new AI-assisted development practices.
You will report to the SENIOR MANAGER, SOFTWARE ENGINEERING and have a hybrid schedule working in Bangalore or Pune, India.
Our benefits package includes …
... and other local benefits!
At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.
#LI-Hybrid
#LI-DB2
Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.
Source: Rockwell Automation careers · View original posting
Rockwell Automation, Inc. is a global leader in industrial automation and digital transformation, based in Milwaukee, Wisconsin. Founded in 1903, the company has evolved significantly, becoming an independent entity focused on automation in the early 2000s. Rockwell Automation is known for its "Connected Enterprise"strategy, which integrates industrial automation solutions with the Industrial Internet of Things (IIoT). The company offers a wide range of integrated solutions, including hardware, software, and services for control systems, data analytics, and connectivity. Key products include Allen-Bradley branded industrial controls, such as programmable logic controllers (PLCs), the Logix control platform, and various safety components. Rockwell Software provides tools for control, simulation, and data access on the plant floor. Their services encompass engineering, system integration, and manufacturing information solutions, supporting industries like automotive, food processing, aerospace, and more. Rockwell Automation continues to lead in innovation, adapting to the evolving needs of the industrial sector.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Rockwell Automation's Application Security (AppSec) approach is deeply integrated into its product development lifecycle, emphasizing a "security by design"philosophy. The company aligns its cybersecurity program with industry standards like the NIST Cybersecurity Framework and IEC 62443-4-1, focusing on identifying, protecting, detecting, responding to, and recovering from cyber threats across its infrastructure, products, and customer environments. Their stated AppSec mission is a holistic strategy to ensure safety, security, and resilience across infrastructure, products, and customers. They adopt an embedded, enabling approach to security, evidenced by an industry-certified secure software development lifecycle process. Their risk philosophy is based on a risk-based approach aligned with NIST CSF principles (Identify, Protect, Detect, Respond, Recover) and includes risk assessments in new product development. No public information was available regarding specific pain points or goals, and no significant contradictions were found.”
Security Team
Rockwell Automation manages cybersecurity risk as part of its overall Enterprise Risk Management program, with strategy executed by security leaders including the CIO, CISO, and Chief Product Security Officer. The Office of Product Safety and Security reports directly to high-level executives. Key public-facing leaders include Stephen Ford (CISO, appointed March 2024) responsible for a holistic cybersecurity strategy, and Tony Baker (VP & Chief Product Security Officer) who leads product safety and security strategy. Specific team size is not publicly available. However, at least 4 relevant AppSec job postings were found as of, indicating a focus on skills like secure SW Engineering, threat modeling, secure coding practices, CI/CD, SAST/DAST tools, Python, DevSecOps tools (Jenkins, GitLab, Docker), Azure cloud, OWASP, NIST, IEC 62443, cryptographic primitives, and Hardware Security Modules (HSMs).
Key Initiatives
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Rockwell Automation's site