{"id":3091473,"url":"https://alion.io/job/schneider-electric-principal-cybersecurity-engineering","title":"Principal, Cybersecurity Engineering","company":{"id":1266,"name":"Schneider Electric","domain":"se.com","url":"https://alion.io/company/schneider-electric","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"B","score":75,"open_postings":366,"ghost_share":0,"stale_share":0.997,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":66000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":13,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"GCP","optional":false},{"name":"OWASP","optional":false},{"name":"SDL","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Verification & Validation","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-10-22T14:57:08Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-25T01:22:26Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Schneider Electric’s purpose is to empower all to make the most of our energy and resources, bridging progress and sustainability for all. We call this Life Is On.\nOur mission is to be your digital partner for Sustainability and Efficiency.\nWe drive digital transformation by integrating world-leading process and energy technologies, end-point to cloud connecting products, controls, software and services, across the entire lifecycle, enabling integrated company management, for homes, buildings, data centers, infrastructure and industries.\nWe are the most local of global companies. We are advocates of open standards and partnership ecosystems that are passionate about our shared Meaningful Purpose, Inclusive and Empowered values.\nJob purpose\nSchneider Electric is searching for a Cyber Security Advisor / Architect for its Energy Management Business CTO Cybersecurity Centre of Excellence team. The role combines cybersecurity architecture, technical advisory, Secure Development Lifecycle governance, and system-level cybersecurity assurance across legacy and modern products and solutions.\nThe Security Advisor / Architect will partner with offer development, system and software architecture, verification and validation, regulations, conformity, technical leaders, and the corporate Product Security Office (PSO) to ensure cybersecurity requirements, guidelines, and processes are applied effectively and consistently.\nThe successful candidate will combine strategic and process leadership with strong technical depth and hands-on engagement. The role requires an ownership mindset, the ability to influence decisions, and the confidence to escalate material cybersecurity risks. Establishing and improving representative system-level cybersecurity verification environments, including a system lab, is an additional responsibility that enables effective security assessment; it is not the primary purpose of the role.\nResponsibilities\nCybersecurity Architecture and Advisory: Provide security architecture guidance to offer and development teams across embedded, software, network, cloud, mobile, and industrial system environments. Review end-to-end architectures, interfaces, data flows, trust boundaries, attack surfaces, third-party integrations, and security controls.\nCybersecurity Integration in Development: Act as the cybersecurity subject-matter expert for offer development and ensure security-by-design principles are embedded from concept and architecture through implementation, verification, release, and maintenance. Support vulnerability triage, root-cause analysis, remediation planning, and validation.\nSecure Development Lifecycle Enablement: Guide and coach teams in applying Secure Development Lifecycle practices, including security requirements, threat modelling, secure design, secure coding, security testing, vulnerability management, and security evidence management. Promote shift-left practices in both legacy and agile/DevSecOps environments.\nThreat and Risk Assessment: Lead or review threat models, attack-path analysis, risk assessments, and security-design decisions. Ensure that cybersecurity controls and verification activities are proportionate to product criticality, deployment context, threat exposure, and business risk.\nSystem-Level Cybersecurity Assurance: Define and review risk-based cybersecurity verification strategies for integrated products and systems. Ensure security requirements and threat scenarios are translated into measurable acceptance criteria, test plans, and traceable evidence.\nSecurity Verification Oversight: Support and review functional security testing, negative and misuse-case testing, vulnerability assessment, robustness testing, fuzzing, penetration testing, and remediation verification. Analyse results and provide clear recommendations for risk treatment and security acceptance.\nSystem Lab and Verification Environment Enablement: Contribute to the definition, setup, and continuous improvement of representative system-level cybersecurity verification environments and testbeds. Work with engineering and verification teams to identify required equipment, system configurations, network topologies, tools, access controls, operating practices, and automation. The responsibility is to enable architecture and assurance outcomes rather than serve as the primary lab operations owner.\nStandards and Regulatory Alignment: Support deployment of cybersecurity processes and technical controls aligned with applicable standards and regulations, including IEC 62443 and other relevant product or system cybersecurity frameworks. Translate requirements into practical architecture, development, and verification expectations.\n Formal Reviews and Audit Support: Support internal Secure Development Lifecycle audits and Formal Cybersecurity Reviews (FCSRs). Evaluate the completeness and quality of security artefacts and evidence, track gaps, and drive issues to appropriate closure or documented risk acceptance.\nPrivacy by Design: Perform or support foundational data protection and privacy screening of offers so that privacy requirements are considered from the initial design stages.\nCross-Functional Collaboration: Work closely with Line of Business developers, architects, validation teams, product owners, regulations and conformity teams, and PSO stakeholders. Represent offer-development perspectives in security meetings and workshops, and keep R&D leadership informed of material risks, emerging requirements, and recommended actions.\nTraining and Capability Building: Develop and deliver targeted training, coaching, and technical guidance to strengthen cybersecurity architecture, SDL execution, threat modelling, and verification competencies within engineering teams.\nMaturity and Continuous Improvement: Monitor relevant cybersecurity and SDL maturity objectives, identify recurring gaps, and lead pragmatic improvements in methods, templates, tooling, verification coverage, and evidence quality.\nCybersecurity Community Engagement: Contribute actively to the Energy Management and company-wide cybersecurity communities, sharing reusable practices and lessons learned.\nKey skills and requirements\n13+ years of relevant experience in cybersecurity, security architecture, product security, software or system engineering, Secure Development Lifecycle, or related engineering disciplines.\nStrong experience providing cybersecurity architecture or advisory support to product and engineering teams.\nAbility to review end-to-end system architectures and assess security across software, firmware, hardware interfaces, networks, cloud services, identities, data flows, and third-party components.\nStrong understanding of software and system development methodologies, including Agile, DevOps, CI/CD, and engineering lifecycle controls.\nDemonstrated experience with threat modelling, attack-surface analysis, cybersecurity risk assessment, and risk-treatment recommendations.\nWorking knowledge of security verification methodologies and tools, including SAST, DAST, dependency scanning, container security, vulnerability assessment, fuzzing, penetration testing, protocol analysis, and remediation verification.\nAbility to convert cybersecurity requirements and threat scenarios into architecture decisions, verification criteria, test expectations, and traceable evidence.\nExperience identifying, analysing, prioritising, and driving remediation of cybersecurity vulnerabilities across integrated system components.\nKnowledge of industrial or connected-product architectures, networking concepts, authentication and authorisation, secure communications, certificates, logging, hardening, update mechanisms, and resilience.\nAbility to align corporate cybersecurity, data security, and privacy policies with product and business requirements.\nProcess discipline and attention to detail, with the ability to translate security requirements into practical controls in partnership with architects and engineering teams.\nStrong communication and influencing skills, including the ability to explain complex technical risks to technical and non-technical stakeholders and to escalate when appropriate.\nSelf-starter and team player with the ability to work independently, manage ambiguity, and drive cross-functional initiatives to closure.\nGood level of English is mandatory.\nQualifications and preferred expertise\nExperience working in Engineering or R&D organisations that follow a Secure Development Lifecycle based on IEC 62443, ISO 21434, Microsoft SDL, or comparable practices.\nExperience developing or reviewing security architectures for embedded, cloud, mobile, industrial automation, operational technology, or energy-management solutions.\nExperience with cloud environments such as AWS, Azure, or GCP and with hybrid edge-to-cloud architectures.\nKnowledge of secure coding standards and weakness taxonomies such as OWASP and CWE.\nExperience with industrial communication protocols, network traffic analysis, packet inspection, and security testing of connected products.\nExperience supporting or establishing system integration labs, cybersecurity testbeds, verification environments, or cyber ranges. This is an additional selection criterion rather than the central identity of the role.\nExperience with test automation, reusable security test harnesses, environment configuration, and evidence capture.\nExperience supporting certification, conformity, customer assurance, internal audit, or formal product-security reviews.\nRecognised cybersecurity certification such as CISSP, CSSLP, IEC 62443 Cybersecurity Expert/Specialist, or an equivalent security architecture or product-security credential.\nProject management or technical leadership experience, with demonstrated influence, negotiation, and stakeholder-management skills.\nStrong analytical, problem-solving, reporting, and presentation skills.\nSuccess indicators\nEngineering teams receive timely, practical, and risk-based cybersecurity architecture guidance.\nThreats, requirements, architecture decisions, verification activities, findings, and evidence remain traceable through the development lifecycle.\nMaterial cybersecurity risks are identified early, communicated clearly, and driven to remediation, mitigation, or documented acceptance.\nSystem-level security verification is representative of intended architectures and deployment scenarios.\nThe system verification lab and associated test environments mature in line with priority assurance needs without displacing the role’s core advisory and architecture responsibilities.\nFormal cybersecurity reviews and audits are supported by complete, credible, and reusable technical evidence.\n What's in it for me?\nRecognition as a technical expert with meaningful impact on organizational security\nOpportunity to lead significant projects and influence security strategy\nSupportive team culture that values innovation and specialized expertise\nProfessional growth through specialized training and certifications\nBring your cybersecurity expertise to a team that's ready to support your success - apply today!\n Rewards designed for you\nOur Total Rewards is our way of saying: We see you and we value you. It’s more than just pay and benefits-it’s a meaningful investment in you. It is designed to help you perform, grow, feel safe, and elevate your potential. The package helps you care for yourself and your family, plan your future, grow your skills and career, collaborate in an inclusive workplace, and contribute to your community. At Schneider Electric, we’re here for what matters most to you. Discover more at our Career Page.\n* Country-specific programs and initiatives may be available.\n Looking to make an IMPACT with your career?\nWhen you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values - Inclusion, Mast...","description_format":"text","description_chars":14227,"description_truncated":true,"requirements":{"experience_years_min":13,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Industrial Automation","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-10-22T14:57:08Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:4","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/schneider-electric-principal-cybersecurity-engineering","json_url":"https://alion.io/job/schneider-electric-principal-cybersecurity-engineering.json","meta":{"generated_at":"2026-10-25T04:11:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5416,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1266},"rest":"https://alion.io/mcp/rest/get_company?id=1266"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fschneider-electric-principal-cybersecurity-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fschneider-electric-principal-cybersecurity-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fschneider-electric-principal-cybersecurity-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/schneider-electric-principal-cybersecurity-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fschneider-electric-principal-cybersecurity-engineering"}]}