Principal, Cybersecurity Engineering
Schneider Electric16 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Provide cybersecurity architecture and advisory guidance across embedded, software, network, cloud, mobile, and industrial system environments.
- Embed security-by-design and Secure Development Lifecycle practices from concept through maintenance, including vulnerability triage, remediation, and validation.
- Lead or review threat models, attack-path analyses, risk assessments, security-design decisions, and risk-treatment recommendations.
- Define and review risk-based cybersecurity verification strategies, test plans, acceptance criteria, and traceable security evidence.
- Oversee functional, negative, misuse-case, vulnerability, robustness, fuzzing, penetration, and remediation-verification testing.
- Contribute to system-level cybersecurity verification environments, testbeds, network topologies, tooling, access controls, and automation.
- Support alignment with IEC 62443 and other cybersecurity standards and regulations, as well as privacy-by-design requirements.
- Support Secure Development Lifecycle audits and Formal Cybersecurity Reviews, identify evidence gaps, and drive issues to closure or documented risk acceptance.
- Train and coach engineering teams on cybersecurity architecture, SDL execution, threat modeling, and verification.
- Lead cross-functional cybersecurity improvements and communicate material risks, requirements, and recommendations to technical and non-technical stakeholders.
Requirements
- 13+ years of relevant experience in cybersecurity, security architecture, product security, software or system engineering, Secure Development Lifecycle, or related engineering disciplines.
- Strong experience providing cybersecurity architecture or advisory support to product and engineering teams.
- Ability to assess end-to-end security across software, firmware, hardware interfaces, networks, cloud services, identities, data flows, and third-party components.
- Experience with threat modeling, attack-surface analysis, cybersecurity risk assessment, vulnerability remediation, and risk-treatment recommendations.
- Working knowledge of SAST, DAST, dependency scanning, container security, vulnerability assessment, fuzzing, penetration testing, protocol analysis, and remediation verification.
- Knowledge of industrial or connected-product architectures, networking, authentication and authorization, secure communications, certificates, logging, hardening, update mechanisms, and resilience.
- Ability to translate cybersecurity requirements and threat scenarios into architecture decisions, verification criteria, test expectations, and traceable evidence.
- Good level of English is mandatory.
- Preferred experience with IEC 62443, ISO 21434, Microsoft SDL, or comparable Secure Development Lifecycle practices.
- Preferred experience with embedded, cloud, mobile, industrial automation, operational technology, energy-management, hybrid edge-to-cloud, or connected-product architectures.
- Preferred experience with AWS, Azure, or GCP, OWASP, CWE, industrial communication protocols, network traffic analysis, security testbeds, test automation, audits, certification, or formal product-security reviews.
- Recognized cybersecurity certification such as CISSP, CSSLP, IEC 62443 Cybersecurity Expert/Specialist, or an equivalent credential is preferred.
- Project management or technical leadership experience and strong analytical, communication, negotiation, reporting, presentation, and stakeholder-management skills are preferred.
Benefits
- Recognition as a technical expert with meaningful organizational-security impact.
- Opportunity to lead significant projects and influence security strategy.
- Supportive team culture valuing innovation and specialized expertise.
- Professional growth through specialized training and certifications.
- Total Rewards programs may support wellbeing, family needs, future planning, skills development, career growth, inclusion, and community contribution; country-specific programs may apply.
Tech Stack
Categories
About Schneider Electric
Schneider Electric builds electrical distribution equipment, industrial automation systems, and energy-management software and services for buildings, data centers, factories, and utilities. Founded in 1836 and headquartered in Rueil-Malmaison, France, it is a public company listed on Euronext Paris. The company sells globally through direct and partner channels in 100+ countries, with offerings such as switchgear, circuit protection, building management, microgrids, and the EcoStruxure software suite.