Principal, Cybersecurity Engineering

Schneider Electric's purpose is to empower all to make the most of our energy and resources, bridging progress and sustainability for all.

We call this Life Is On.

Our mission is to be your digital partner for Sustainability and Efficiency.

We drive digital transformation by integrating world-leading process and energy technologies, end-point to cloud connecting products, controls, software and services, across the entire lifecycle, enabling integrated company management, for homes, buildings, data centers, infrastructure and industries.

We are the most local of global companies.

We are advocates of open standards and partnership ecosystems that are passionate about our shared Meaningful Purpose, Inclusive and Empowered values.

Job purpose

Schneider Electric is searching for a Cyber Security Advisor / Architect for its Energy Management Business CTO Cybersecurity Centre of Excellence team.

The role combines cybersecurity architecture, technical advisory, Secure Development Lifecycle governance, and system-level cybersecurity assurance across legacy and modern products and solutions.

The Security Advisor / Architect will partner with offer development, system and software architecture, verification and validation, regulations, conformity, technical leaders, and the corporate Product Security Office (PSO) to ensure cybersecurity requirements, guidelines, and processes are applied effectively and consistently.

The successful candidate will combine strategic and process leadership with strong technical depth and hands-on engagement.

The role requires an ownership mindset, the ability to influence decisions, and the confidence to escalate material cybersecurity risks.

Establishing and improving representative system-level cybersecurity verification environments, including a system lab, is an additional responsibility that enables effective security assessment; it is not the primary purpose of the role.

Responsibilities


* Cybersecurity Architecture and Advisory: Provide security architecture guidance to offer and development teams across embedded, software, network, cloud, mobile, and industrial system environments.

Review end-to-end architectures, interfaces, data flows, trust boundaries, attack surfaces, third-party integrations, and security controls.


* Cybersecurity Integration in Development: Act as the cybersecurity subject-matter expert for offer development and ensure security-by-design principles are embedded from concept and architecture through implementation, verification, release, and maintenance.

Support vulnerability triage, root-cause analysis, remediation planning, and validation.


* Secure Development Lifecycle Enablement: Guide and coach teams in applying Secure Development Lifecycle practices, including security requirements, threat modelling, secure design, secure coding, security testing, vulnerability management, and security evidence management.

Promote shift-left practices in both legacy and agile/DevSe...