{"id":2991205,"url":"https://alion.io/job/schneider-electric-engineer-ii-cybersecurity-incident-response","title":"Engineer II, Cybersecurity Incident Response","company":{"id":1266,"name":"Schneider Electric","domain":"se.com","url":"https://alion.io/company/schneider-electric","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"B","score":75,"open_postings":395,"ghost_share":0,"stale_share":0.982,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16000,"max_usd":39000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Copilot","optional":false},{"name":"Copilot Studio","optional":false},{"name":"Linux","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-08-04T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-30T21:27:25Z","board_verified":false,"closed_at":"2026-10-30T21:27:25Z","days_open":87,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":87},"description":"Cyber Risk and Incident Response\nEngineer II, Cybersecurity Incident Response\nExp 3-5 yrs\nBengaluru, India\nPosition Summary\nWe are looking for a motivated Cyber Risk & Incident Response engineer to join the Enterprise IT Infrastructure Security team in Bengaluru. The position supports the mitigation of cyber risks and response to incidents impacting Schneider Electric digital assets and population.\nThe role is intentionally generalist: it combines cyber risk analysis, incident response, threat awareness, IT/infrastructure understanding, and practical automation skills.\nThe successful candidate will help identify risk scenario impacting Schneider Electric, support mitigation strategies, assist in incident response investigations, and contribute to automate processes and implementing AI tooling to scale up services within the team.\nRole Mission\nHelp identify, assess, and reduce cyber risks affecting critical assets within Schneider Electric.\nSupport investigations and incident response activities related to executive account, identity, device, phishing, credential theft, and social engineering scenarios.\nContribute to the definition of practical mitigation strategies, controls, playbooks, and follow-up actions.\nUse scripting, data analysis, and AI-assisted automation to improve detection, triage, reporting, and risk monitoring workflows.\nKey Responsibilities\nCyber Risk Management\nSupport the assessment and monitoring of cyber risks affecting critical digital assets and population.\nIdentify recurring risk patterns, exposure scenarios.\nAssist in defining and tracking mitigation actions to reduce likelihood and impact on critical assets and population.\nPrepare structured risk summaries, observations, and recommendations for internal stakeholders.\nIncident Response Support\nSupport the incident response lifecycle, including triage, analysis, containment support, recovery coordination, and post-incident actions.\nAssist with the collection and analysis of evidence, indicators of compromise, suspicious sign-in activity, phishing artefacts, endpoint alerts, and relevant security telemetry.\nCoordinate with SOC, Cyber Defense, Identity, Infrastructure, Forensics, Threat Intelligence, and regional security teams as needed.\nDocument investigation steps, findings, decisions, and lessons learned in a clear and structured manner.\nSecurity Analysis & Threat Awareness\nAnalyze common attack vectors.\nMonitor relevant threat intelligence and translate it into practical risk observations and recommended actions.\nSupport proactive reviews, hunting hypotheses, and control validation activities.\nAutomation, Coding & AI Enablement\nDevelop and maintain simple scripts, queries, or workflows to automate repetitive security and reporting tasks.\nContribute to the adoption of AI-assisted security operations capabilities, including Copilot-based summaries, workflow automation, and investigation support use cases.\nPropose pragmatic improvements to reduce manual effort and increase consistency in risk identification, triage, and reporting.\nCollaboration & Communication\nWork effectively with global teams, regional CISOs, Digital Risk Leaders, SOC, Identity, Infrastructure, and other stakeholders.\nCommunicate technical observations in clear English to both technical and non-technical audiences.\nMaintain discretion and professionalism when working on sensitive cases involving company leaders.\nContribute to playbooks, knowledge articles, lessons learned, and continuous improvement activities.\nDesired Technical Skills\nCybersecurity Risk Management (Intermediate)\nMaster cyber risk scenarios, impact, likelihood, controls, and mitigation plans.\nIncident Response (Beginner)\nUnderstand triage, analysis, containment, recovery, evidence gathering, and post-incident action tracking.\nSecurity Monitoring / SIEM (Beginner)\nAbility to use security monitoring tools and understand alerts, events, queries, and investigation timelines.\nIdentity & Access Security (Beginner)\nUnderstand account compromise, MFA, privileged access, suspicious sign-ins, and executive identity protection scenarios.\nNetwork Security (Beginner)\nUnderstand firewalls, proxies, IDS/IPS, WAF, network protocols, and common network security concepts.\nWindows Administration (Beginner)\nUnderstand Windows environments, users, services, logs, endpoints, and basic administration concepts.\nLinux Administration (Beginner)\nUnderstand basic Linux operating system concepts and command-line usage.\nCloud Security (Azure / AWS) (Beginner)\nUnderstand basic cloud concepts and common security controls in Azure and AWS.\nVulnerability Management (Intermediate)\nUnderstand vulnerability impact, prioritization, remediation tracking, and risk-based decision making.\nThreat Intelligence (Beginner)\nUnderstand how to gather and interpret threat information relevant to executive-targeted risks.\nDigital Forensics (Beginner)\nUnderstand basic evidence handling, artifact review, and forensic investigation concepts.\nCoding & Automation (Beginner)\nUse Python, PowerShell, Bash, KQL, Power Automate, APIs, or similar tools to automate data processing, reporting, and investigation tasks.\nAI-Assisted Security Operations (Beginner)\nUnderstand how AI and copilots can support summaries, enrichment, workflow automation, and repetitive security tasks.\nExperience & Education\nRequired\n3-5 years of professional experience in Cybersecurity, risk management, security operations, or incident response.\nTechnical background in computer science, information technology, cybersecurity, engineering, or related discipline.\nGood understanding of enterprise IT environments and ability to connect technical facts with business risk.\nWorking proficiency in English, both written and spoken.\nPreferred\nExposure to security risk management, incident response, vulnerability management, identity security, or cloud security.\nExperience with scripting, data analysis, automation workflows, or API-based integrations.\nFamiliarity with Microsoft security technologies, KQL, Power Automate, Copilot Studio, or similar automation platforms.\nSecurity certifications such as CISSP, CISM, CISA, Security+, GCEH, or equivalent are a plus, but not mandatory.\nSoft Skills & Behaviors\nCurious, proactive, and willing to learn across multiple cybersecurity and IT domains.\nStructured and organized, with the ability to document facts, analysis, decisions, and follow-up actions clearly.\nAble to operate calmly in time-sensitive or high-pressure situations.\nStrong analytical mindset and ability to identify practical, risk-based recommendations.\nTeam player able to collaborate across regions, functions, and technical domains.\nComfortable working with sensitive information and maintaining confidentiality.\nAble to translate technical observations into clear business-oriented messages.\n Rewards designed for you\nOur Total Rewards is our way of saying: We see you and we value you. It’s more than just pay and benefits-it’s a meaningful investment in you. It is designed to help you perform, grow, feel safe, and elevate your potential. The package helps you care for yourself and your family, plan your future, grow your skills and career, collaborate in an inclusive workplace, and contribute to your community. At Schneider Electric, we’re here for what matters most to you. Discover more at our Career Page.\n* Country-specific programs and initiatives may be available.\n Looking to make an IMPACT with your career?\nWhen you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values - Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork - starts with us.\nIMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.\nWe are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.\nBecome an IMPACT Maker with Schneider Electric - apply today!\n€40 billion global revenue\n+9% organic growth\n150 000+ employees in 100+ countries\n\nYou must submit an online application to be considered for any position with us. This position will be posted until filled.\nSchneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do. \nAt Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here\n\nSchneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.","description_format":"text","description_chars":9931,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-10-21T09:54:46Z"},{"event":"close","at":"2026-10-30T21:27:25Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/schneider-electric-engineer-ii-cybersecurity-incident-response","json_url":"https://alion.io/job/schneider-electric-engineer-ii-cybersecurity-incident-response.json","meta":{"generated_at":"2026-11-02T00:29:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":814,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1266},"rest":"https://alion.io/mcp/rest/get_company?id=1266"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fschneider-electric-engineer-ii-cybersecurity-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fschneider-electric-engineer-ii-cybersecurity-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fschneider-electric-engineer-ii-cybersecurity-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/schneider-electric-engineer-ii-cybersecurity-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fschneider-electric-engineer-ii-cybersecurity-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2991205}},{"tool":"search_jobs","arguments":{"company":"se.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2991205},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}