Third Party Product Security Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Summary:

As a Third-Party Product Security Engineer, you will play a critical role in Third party risk & compliance (TPRC) program to strengthen supply chain security, product compliance, and secure qualification of third-party components.

You will lead supplier security assessments with closed-loop remediation, support secure product qualification, and drive supplier improvements across the ecosystem.

This role requires close collaboration with Business Units, Product Security, and global suppliers to embed secure development practices and operationalize regulatory requirements (e.g ..EU CRA, MR, NIS2), while driving continuous improvement.

Strong stakeholder engagement and influencing skills are critical to building partnerships and advancing supply chain security outcomes.

Your Responsibilities:

• Lead evaluation, risk-based qualification, and onboarding of suppliers and partners, ensuring understanding of TPRC frameworks and product security requirements

• Conduct supplier security assessments with closed-loop remediation tracking, improving and compliance with Secure Development Lifecycle (SDL) and regulatory requirements (e.g., EU CRA, NIS2)

• Review supplier design controls and secure software development practices (verification and validation, risk management, configuration management, build/release governance) to ensure understanding of industry and product security standards