• Serving as subject matter expert and working lead for IEC 62443 certifications; owning the gap between the standard's requirements and Inductive Automation practice
• Monitoring practice changes in Development and Quality Assurance that could create compliance drift; supporting corrective actions and nonconformance activities
• Tracking security roadmap and EU Cyber Resilience Act product-level requirements
• Supporting external security and compliance requirements as needed / requested (e.g. Life Sciences, automotive, aerospace, Dept of Defense, US/EU law or regulation, etc).
• Participating in ISO and CRA conformity audits as the Software Engineering representative; prepare and maintain auditable evidence (tickets, code reviews, QA records)
• Coordinating on third party penetration testing; incorporating results into the SDLC ticket process
• Owning day-to-day currency of process documents. Maintains the mapping between committed standards (e.g. 62443, ISO 27001) practices and QMS documentation
• Maintaining SDLC traceability from code change through reviews, tests, requirements, and customer tickets
• Verifying Release Checklist completion as compliance evidence for all production software, including hotfixes
• Responsible for the Software Engineering portion of the Coordinated Vulnerability Disclosure and incident management program, in coordination with other stakeholders; keeps the playbook and process documentation current, with awareness of reporting requirements.
• Maintaining Incident Manager qualification and training for Software Engineering personnel with defined CVD roles; drive post-incident lessons learned into process and training
• Supporting Ignition Coordinated Vulnerability Disclosure. Coordinating with CISA/National Vulnerability Database (NVD), communicating with external researchers and stakeholders, and managing disclosure and release timing; supporting ENISA reporting requirements per compliance with the EU Cyber Resilience Act
• Running internal readiness checks and pre-audit gap assessments; tracks personnel qualification
• Identifying training gaps and coordinate delivery with engineering managers and leadership
• Consulting on Threat Modeling and participating in related activities

• Technical Bachelor's Degree required (computer science, engineering, software development, or cybersecurity)
• Relevant Master's Degree or demonstrated equivalent experience required
• Cybersecurity certification or equivalent demonstrated experience required (CISSP, GICSP, or ISA/IEC 62443 Cybersecurity Expert)
• Experience (8 years required; 15+ years preferred)
• Software development experience (not necessarily writing code; design, testing, assurance, management, etc); agile preferred.
• Extensive security or compliance audit experience (required); ISO Lead Auditor or equivalent with experience
• Extensive experience with policy and process documentation (required)
• Delivering software in controlled or regulated environment
• Incident management or coordinated vulnerability disclosure program experience
• Communicating with and presenting to executive leadership

• Experience achieving IEC 62443-4-1 or 62443-4-2 certification, or equivalent
• Experience with EU Cyber Resilience Act, or equivalent
• Threat modeling experience is strongly preferred

Who are we?

Champions for industrial automation innovation and driven by a mission statement to empower our customers to swiftly turn great ideas into reality by removing all technological and economic obstacles , we create and deliver solutions that relieve pain points, bring efficiency to operations and optimize integration.

Why Choose Inductive Automation?

Our passion goes beyond customers. We celebrate your personal and professional milestones, and we support our teams with meaningful work in a collaborative environment.

We find that great work-life balance inspires teams to do their best work and empowers people to live their best lives. That's why diversity, fun, and flexibility are ingrained into our work culture.

The Inductive Automation team understands the importance of personal growth and social connection. So things like time for professional development, or company and team activities are baked right into the schedule to keep us all engaged, connected, and prospering.

• 100% Employee Covered Health Care: Don’t pay a dime for your medical, dental, and vision insurance
• Paid Time Off: Receive paid holidays, vacation, and sick time
• 401k with Match: Save for the future with our company-matching 401k program
• World-Class Headquarters: While on-site, enjoy complimentary snacks and beverages, then challenge a friend to a game of pool, table tennis, shuffleboard, or foosball
• Adjacent Nature Reserve: On-site employees enjoy breathtaking views and adventures that energize and inspire

Additional Information

At this time, we are unable to offer employment for individuals located outside of the United States and/or those who require sponsorship for employment visa status (e.g., H-1B visa status). We know you've got a lot of options when seeking an employer where your skills and talents will shine, so we really appreciate that you considered us.