Job Description

Rockwell Automation is a global technology leader focused on helping the world\xe2\x80\x99s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that\xe2\x80\x99s you we would love to have you join us!



Responsibilities for DevSecOps Engineer

Builds relationships with developers, stakeholders, and technical leaders to incorporate security principles into engineering design and deployments.

Oversee implementation of defensive configurations and countermeasures across cloud infrastructure and applications.

Drafts and advocate Secure SDLC strategy and practices in tandem with other technical team leads.

Simplify automation that applies security inter-workings with CI/CD pipelines.

Support the ability to \xe2\x80\x9cshift left\xe2\x80\x9d and incorporate security early on and throughout the development lifecycle including threat modeling and developer IDE security features.

Participate in engineering teams\xe2\x80\x99 product planning cycles and committees.

Assist prioritization of vulnerabilities identified in code through automated and manual assessments and promote quick remediation.

Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.

Partner with architects to define security principles in architecture, infrastructure and code.

Enrich application architecture with security standards, best practices and define baseline configuration.

Assist in documentation of security aspects application systems, process flows, and support processes.

Participate in meetings to review processes and identify requirements and/or needs.

Communicate effectively with management to enhance their understanding of the opportunities and limitations of information systems.

Research application security best practices and recommend solutions to solve problems or alleviate pain point

Build and validate declarative threat models automation.

Qualifications for DevSecOps Engineer

Bachelor\xe2\x80\x99s or associate degree in Computer Science, Management Information Sciences or area of functional responsibility preferred, or equivalent years of industry work experience

5+ years of DevSecOps or similar work experience.

Possess a solid understand of information security and cloud application security

Knowledge of all aspects of application development and project life cycles Design and development experience with engineering software design tools

Proficient in securing Windows and Linux Operating Systems, applications, and networking

Experience with operations and security across Microsoft Azure

Knowledge of DevSecOps concepts like SAST, DAST and SCA

Automation experience using Terraform to ensure cloud services / infrastructure meet security guidelines.

Experience integrating security scanning/tooling into development pipeline.

Experience in analyzing and securing microservices and applications developed using JAVA, and Python.

Hands-on development experience in Java, Python/shell scripting.

Scripting experience required with strong focus on PowerShell and Azure CLI

Proficiency with version control systems e.g., git, SVN, CVS

Experience with CI/CD pipelines (such as Bitbucket, Jenkins, JFrog) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).

Experience with architecture and security reviews, threat modeling and applications risk highly desired.

Working knowledge of SQL and databases

Experience working with Agile methodologies.

Knowledge of AI/ML model security and adversarial techniques within the analytics domains is highly desirable.

Knowledge of working with and securing Analytical Models is highly desirable.

Strong verbal and written communication skills with ability to effectively communicate.

Rockwell Automation