Remote Product Security Test Engineer

Summary

Join Verve, a Rockwell Automation Company, as a Security Test Engineer to drive manual and automated security tests of software products and work with the broader development organization to verify and articulate findings.

Requirements

• At least 3 years experience as a pen tester, vulnerability analyst, or similar technical role related to software security
• Understanding of web application security, linux/unix system security, network security, and applied cryptography
• Familiarity with CVE, CPE, and CVSS
• Strong written & verbal communication skills
• Legal authorization to work in the US is required

Responsibilities

• Perform product vulnerability assessments
• Product security research, penetration tests, and exploratory security testing against Verve’s software products
• Assist with architecture development, design, and implementation of security test automation
• Work with development and software QA teams to stay aware of changes being made to the Verve products
• Coordinate with development and security leadership regarding findings, areas of concern, and opportunities for improvement related to product security
• Write detailed bug and vulnerability finding reports

Preferred Qualifications

• Experience as a software developer or working closely with developers, ideally in a CI/CD environment
• Familiarity with OT devices and environments
• Experience using various security assessment tools (SCA, SAST, DAST, and vulnerability scanners)