Principal DevSecOps Engineer
Schneider Electric2 days ago
Andover, United KingdomStaff+
Base Salary
$142k - $214k/yr
Responsibilities
- Own the operational security posture, baselines, controls, reporting, and continuous improvement of the EcoStruxure Building Data Platform.
- Lead vulnerability triage, remediation planning, risk reduction, reporting, and coordination across engineering teams.
- Implement Secure SDLC requirements, automated security controls, security gates, release readiness checks, and evidence generation in software delivery workflows.
- Own SBOM generation, dependency analysis, artifact validation, binary scanning, container integrity, software provenance, and artifact attestation processes.
- Configure and continuously improve SonarQube, Black Duck Binary Analysis, SBOM Studio, GitHub Security, secret scanning, container security, dependency analysis, and security reporting tools.
- Support penetration testing, CPCERT reviews, compliance activities, audits, security assessments, and release security reviews.
- Secure Azure Kubernetes Service, Azure Container Registry, Azure Entra ID, Azure Key Vault, workload identities, RBAC, container platforms, networks, and cloud configurations.
- Provide security guidance and implementation support to engineering, architecture, operations, product, and security teams.
Requirements
- Bachelor’s degree in cybersecurity, computer science, software engineering, information technology, computer engineering, or a related technical discipline; an equivalent combination of education, professional training, and relevant industry experience may be considered.
- 8+ years of experience in cybersecurity engineering, application security, cloud security, DevSecOps, software engineering, or related security-focused roles.
- 3+ years of experience supporting Azure-based cloud-native platforms.
- Experience owning security implementation activities, Secure SDLC practices, vulnerability management, remediation programs, security testing, dependency analysis, software composition analysis, and container security.
- Experience implementing software supply chain security controls, SBOM processes, CI/CD security automation, release security reviews, compliance activities, audits, or penetration testing.
- Experience securing cloud-native platforms, containerized workloads, APIs, Kubernetes environments, identity and access management, secrets management, and RBAC models.
- Experience generating security evidence, remediation reporting, security metrics, and dashboards for leadership and compliance stakeholders.
- Experience influencing engineering teams without direct organizational authority and collaborating across software engineering, architecture, operations, security, and product management.
- Preferred experience includes SaaS, IoT, telemetry, real-time data, Azure data platforms, 24x7 availability, distributed engineering, regulated enterprise, ISO 27001, IEC 62443, SOC 2, NIST CSF, and NIST SSDF environments.
- Preferred certifications include AZ-500, AZ-400, CISSP, CCSP, CSSLP, CKS, and GCSA.
Benefits
- Medical, dental, vision, basic life insurance, Benefit Bucks, flexible work arrangements, paid family leave, well-being programs, 12 holidays, and 15 days of paid time off.
- 401(k) with company match, company share ownership, incentives, and other financial planning programs.
- Professional development through certifications, training, global opportunities, the Schneider Career Hub, and Coursera learning platforms.
- Inclusive and collaborative workplace with recognition, employee voice, volunteer leave, foundation programs, youth education initiatives, and military leave benefits.
- Full-time U.S.-based position with compensation applying to candidates located within the United States.
Tech Stack
Categories
About Schneider Electric
Schneider Electric builds electrical distribution equipment, industrial automation systems, and energy-management software and services for buildings, data centers, factories, and utilities. Founded in 1836 and headquartered in Rueil-Malmaison, France, it is a public company listed on Euronext Paris. The company sells globally through direct and partner channels in 100+ countries, with offerings such as switchgear, circuit protection, building management, microgrids, and the EcoStruxure software suite.