Product Security Test Engineer - Ethical Hacker

About the role

Rockwell Automation is looking for a Product Security Test Engineer (Ethical Hacker) to join its engineering team within the Safety, Sensing, and Industrial Components business, which develops sensors, safety devices, power and motor control components and software for industrial control applications. The engineer designs and completes security assessments of industrial control system products, embedded devices, industrial software and communication protocols, combining feature testing, penetration testing, fuzz testing and test automation to identify vulnerabilities. The position reports to a manager in the USA and follows a hybrid schedule based in Katowice, Poland.

Key responsibilities

• Create security test plans, test cases and test specifications based on product and industry standards, traceable to security requirements
• Procure security test tools, equipment, platforms and environments, and contribute to test architecture and security test automation
• Develop schedules and effort estimates for security tests
• Perform security and penetration tests on sensors, safety devices, industrial components, firmware, protocols, Windows-based industrial software, embedded web interfaces and wireless technologies
• Document test steps and reproducibility details for anomalies and vulnerabilities, support root cause research, and write formal test reports reviewed with the development team
• Conduct product vulnerability assessments and security research

Required profile

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering (with a CS emphasis) or a technical degree with a Cyber Security focus
• Relevant coursework in software development and object-oriented design and implementation
• 2+ years of penetration testing experience

Required skills

• Programming and scripting, including Python
• Understanding of OSI and TCP/IP networking and hands-on network configuration
• Familiarity with security verification and validation on embedded products: threat modeling, vulnerability scanning, fuzz testing, network resiliency testing
• Preferred: C++ and C#, reverse engineering, AI-assisted security testing, Burp Suite and Nmap, industrial protocols (CIP, EtherNet/IP, IO-Link, GuardLink, Modbus, PROFINET), Wireshark, wireless testing, and security certifications such as OSCP, GPEN or CEH

What we offer

• Paid volunteer time off after 6 months for eligible employees
• Volunteer and donation matching program
• On-demand digital course library and mindfulness programs with a premium membership to Calm
• Employee Assistance Program and personalized wellbeing programs
• Hybrid policy: work at a Rockwell location at least Mondays, Tuesdays and Thursdays