- 工作方式
- 混合办公
- 类型
- 全职
- 发布
- 2025-10-21
- 编号
- R25-4246
职责
- 设计和开发可编程逻辑控制器的嵌入式安全相关功能。
- 贯穿软件开发生命周期：需求管理、设计、实施、测试、发布和维护。
- 执行安全相关活动，如威胁建模、IEC 62443 4-2 产品认证、第三方库管理、漏洞调查和合规性。
- 构建和维护自动化测试以支持新的和现有的产品功能。
- 了解 OT 环境的安全威胁和漏洞。
- 指导经验不足的人员，鼓励开发社区之间的知识共享和学习。
必备要求
- 相关专业学士学位。
- 申请人需持有在美国工作的合法授权。目前及未来，我们不会为该职位申请工作签证。
优先条件
- 该职位通常需要至少 0 年或以上经验，并在软件设计和实施方面具有专业发展经验。
- 计算机工程、计算机科学、电子工程学士学位，或具备软件工程原理、理论、概念和技术应用方面的同等知识，或具备同等⼯作经验。
- 愿意在 SAFe Agile 或者看板环境中工作。
- 产品安全经验。
- 具有使用 C++ 等面向对象语言开发嵌入式软件的经验。
- 具有使用 Git 和 Jenkins 等开源工具的经验。
- 具有持续集成环境、自动化测试和验收测试的经验。
- CompTIA Security+、SANS GIAC 或 CISSP 等安全认证。
- 具有开发软件和测试安全标准（如 IEC 61508 或 IEC 62443）的经验。
- 工程、计算机科学或控制方面的高级课程或学位。
Responsibilities
- Design and develop embedded security-related features for programmable logic controllers.
- Work across the software development lifecycle: requirements management, design, implementation, testing, release, and maintenance.
- Perform security-related activities such as threat modeling, IEC 62443 4-2 product certification, third-party library management, vulnerability investigation, and compliance.
- Build and maintain automated tests to support new and existing product features.
- Understand security threats and vulnerabilities in OT environments.
- Mentor less experienced personnel and encourage knowledge sharing and learning across development communities.
Must Have
- Bachelor's degree in a relevant field.
- Applicants must have legal authorization to work in the United States. We will not sponsor work visas for this position now or in the future.
Preferred
- This position typically requires at least 0 years of experience and professional development experience in software design and implementation.
- Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or equivalent knowledge of software engineering principles, theory, concepts, and technology application, or equivalent work experience.
- Willingness to work in a SAFe Agile or Kanban environment.
- Product security experience.
- Experience developing embedded software using object-oriented languages such as C++.
- Experience with open-source tools such as Git and Jenkins.
- Experience with continuous integration environments, automated testing, and acceptance testing.
- Security certifications such as CompTIA Security+, SANS GIAC, or CISSP.
- Experience developing software and testing security standards such as IEC 61508 or IEC 62443.
- Advanced coursework or degree in engineering, computer science, or controls.
公司简介
罗克韦尔自动化（Rockwell Automation, Inc.，纽约证券交易所代码：ROK）是工业自动化和数字化转型领域的全球领先企业，总部位于美国威斯康星州密尔沃基，拥有约 23,000 名员工，为 100 多个国家和地区的客户提供服务。公司致力于将人们的想象力与技术潜力相结合，帮助全球制造商提高生产力、可持续性和敏捷性，并在工业企业中实施 The Connected Enterprise。