Engineer II, Cybersecurity Incident Response

Cyber Risk and Incident Response

Engineer II, Cybersecurity Incident Response

Exp 3-5 yrs

Bengaluru, India
Position Summary
We are looking for a motivated Cyber Risk & Incident Response engineer to join the Enterprise IT Infrastructure Security team in Bengaluru.

The position supports the mitigation of cyber risks and response to incidents impacting Schneider Electric digital assets and population.

The role is intentionally generalist: it combines cyber risk analysis, incident response, threat awareness, IT/infrastructure understanding, and practical automation skills.

The successful candidate will help identify risk scenario impacting Schneider Electric, support mitigation strategies, assist in incident response investigations, and contribute to automate processes and implementing AI tooling to scale up services within the team.
Role Mission
Help identify, assess, and reduce cyber risks affecting critical assets within Schneider Electric.


* Support investigations and incident response activities related to executive account, identity, device, phishing, credential theft, and social engineering scenarios.


* Contribute to the definition of practical mitigation strategies, controls, playbooks, and follow-up actions.


* Use scripting, data analysis, and AI-assisted automation to improve detection, triage, reporting, and risk monitoring workflows.

Key ResponsibilitiesCyber Risk Management


* Support the assessment and monitoring of cyber risks affecting critical digital assets and population.


* Identify recurring risk patterns, exposure scenarios.


* Assist in defining and tracking mitigation actions to reduce likelihood and impact on critical assets and population.


* Prepare structured risk summaries, observations, and recommendations for internal stakeholders.

Incident Response Support


* Support the incident response lifecycle, including triage, analysis, containment support, recovery coordination, and post-incident actions.


* Assist with the collection and analysis of evidence, indicators of compromise, suspicious sign-in activity, phishing artefacts, endpoint alerts, and relevant security telemetry.


* Coordinate with SOC, Cyber Defense, Identity, Infrastructure, Forensics, Threat Intelligence, and regional security teams as needed.


* Document investigation steps, findings, decisions, and lessons learned in a clear and structured manner.

Security Analysis & Threat Awareness


* Analyze common attack vectors.


* Monitor relevant threat intelligence and translate it into practical risk observations and recommended actions.


* Support proactive reviews, hunting hypotheses, and control validation activities.

Automation, Coding & AI Enablement


* Develop and maintain simple scripts, queries, or workflows to automate repetitive security and reporting tasks.


* Contribute to the adoption of AI-assisted security operations capabilities, including Copilot-based summaries, wor...