{"id":2994452,"url":"https://alion.io/job/schneider-electric-principal-devsecops-engineer","title":"Principal DevSecOps Engineer","company":{"id":1266,"name":"Schneider Electric","domain":"se.com","url":"https://alion.io/company/schneider-electric","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"B","score":75,"open_postings":383,"ghost_share":0,"stale_share":0.99,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Andover, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":142400,"max":213600,"currency":"USD","period":"year","gross":null,"usd_annual":213600},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SBOM","optional":false},{"name":"SonarQube","optional":false},{"name":"Azure DevOps","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-02T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-27T04:01:50Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"About the EcoStruxure Building Data Platform\nThe EcoStruxure Building Data Platform is Schneider Electric's independent data layer for collecting, contextualizing, storing, and analyzing building operational data at scale.\nThe platform ingests and processes real-time telemetry from connected building systems using cloud-native technologies hosted in Microsoft Azure. It provides the foundation for analytics, digital services, applications, and customer integrations across Schneider Electric's building ecosystem.\nRole Overview\nWe are seeking a Principal DevSecOps Engineer to own the implementation, operation, and continuous improvement of the security posture of the EcoStruxure Building Data Platform.\nThis role serves as the hands-on security leader embedded within the engineering organization. The successful candidate will lead security tooling, security automation, vulnerability remediation coordination, software supply chain security, Secure SDLC implementation, release security readiness, and cloud security enablement across the platform.\nThe Principal DevSecOps Engineer is accountable for the implementation and operational execution of product security controls.\nThis role works closely with:\nSecurity Advisor\nPrincipal Systems Engineer\nEngineering Technical Leads\nPrincipal Cloud Operations & Infrastructure Engineer\nProduct Owners\nSchneider Electric Product Security\n24x7 Operation Support Team\nThe Security Advisor remains responsible for independent governance, risk assessment, policy interpretation, CPCERT alignment, risk acceptance guidance, and security oversight.\nIn this role, you are responsible for implementation, execution, automation, evidence generation, and remediation coordination.\nKey Responsibilities\nSecurity Posture Management\nOwn the operational security posture of the EcoStruxure Building Data Platform.\nEstablish and maintain security baselines across applications, cloud services, containers, APIs, CI/CD systems, and supporting platform components.\nContinuously assess security maturity and identify opportunities for improvement.\nImplement security controls and automation that reduce platform risk.\nReport operational security health, remediation status, and security trends.\nVulnerability Management & Remediation\nOperate vulnerability management activities in accordance with Schneider Electric CPCERT processes and security requirements.\nPerform technical triage of findings from SonarQube, Black Duck Binary Analysis (BDBA), penetration tests, container security scans, dependency analysis tools, and cloud security assessments.\nAssess technical applicability of vulnerabilities and identify remediation approaches for affected platform components.\nPartner with the Security Advisor on vulnerability prioritization, risk evaluation, exception reviews, and remediation timelines.\nLead remediation planning and coordinate execution with Technical Leads and engineering teams.\nTrack remediation progress, closure status, security debt metrics, and vulnerability trends.\nSupport vulnerability reporting and evidence requirements for security reviews, audits, and compliance activities.\nSecure SDLC Implementation & Automation\nPartner with the Security Advisor to implement Secure SDLC requirements across the EcoStruxure Building Data Platform.\nEmbed automated security controls and validation activities into GitHub Actions workflows and deployment pipelines.\nImplement approved security gates and release readiness checks within software delivery processes.\nGenerate and maintain security evidence required for product release reviews and compliance activities.\nSupport developer enablement through practical guidance, tooling, templates, and automation that promote secure engineering practices.\nImprove security visibility within the software development lifecycle through automation and metrics.\nSoftware Supply Chain Security\nOwn Software Bill of Materials (SBOM) generation and management processes.\nEstablish software supply chain security controls across development and release processes.\nManage dependency analysis, artifact validation, and binary scanning programs.\nEnsure container image integrity and security compliance.\nDrive adoption of software provenance and artifact attestation practices.\nSecurity Tooling Ownership\nOwn project level configuration, operational effectiveness, and continuous improvement of:\nSonarQube\nBlack Duck Binary Analysis (BDBA)\nSBOM Studio\nGitHub Security\nSecret scanning solutions\nContainer security platforms\nDependency analysis solutions\nSecurity reporting and dashboarding tools\nPartner with engineering teams to ensure security tooling is effective, adopted, and integrated into day-to-day development activities.\nSecurity Operations & Compliance Enablement\nImplement approved security requirements through engineering controls, automation, and security tooling.\nPartner with the Security Advisor, Product Owners, and Technical Leads to plan and execute security remediation initiatives.\nSupport penetration testing, CPCERT reviews, compliance activities, and security assessments.\nCoordinate operational activities supporting release security reviews.\nMaintain security dashboards, remediation reporting, and evidence repositories.\nDrive continuous improvement of security tooling, visibility, operational processes, and security engineering practices.\nCloud & Platform Security\nPartner with the Principal Cloud Operations & Infrastructure Engineer to secure:\nAzure Kubernetes Service (AKS)\nAzure Container Registry (ACR)\nAzure Entra ID\nAzure Key Vault\nWorkload identities\nRole-Based Access Control (RBAC)\nContainer platforms\nNetwork security controls\nCloud platform configurations\nProvide guidance and implementation support for secure cloud architecture patterns.\nCross-Functional Collaboration\nWork closely with Technical Leads to integrate security practices into product development.\nPartner with the Principal Systems Engineer on security-related architecture decisions and standards.\nCollaborate with the Security Advisor on risk reviews, security findings, mitigation strategies, and compliance activities.\nSupport 24x7 operations teams with security operational procedures, monitoring guidance, and escalation processes.\nAct as the primary security implementation lead within the EcoStruxure Building Data Platform organization.\nRequired Qualifications\nBachelor's degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, Computer Engineering, or a related technical discipline.\nEquivalent combination of education, professional training, and relevant industry experience may be considered.\nRequired Experience\n8+ years of experience in cybersecurity engineering, application security, cloud security, DevSecOps, software engineering, or related security-focused roles.\n3+ years of experience supporting Azure-based cloud-native platforms.\nExperience owning or leading security implementation activities within a software product organization.\nExperience implementing Secure Software Development Lifecycle (Secure SDLC) practices within engineering teams.\nExperience driving vulnerability management and remediation programs across multiple product or engineering teams.\nExperience performing vulnerability assessment, technical triage, remediation planning, and risk reduction activities.\nExperience working with application security testing, dependency analysis, software composition analysis, and container security tools.\nExperience implementing software supply chain security controls and Software Bill of Materials (SBOM) processes.\nExperience integrating security controls, validation, and automation into CI/CD pipelines and software delivery workflows.\nExperience supporting release security reviews, compliance activities, audits, penetration testing, or security assessments.\nExperience securing cloud-native platforms, containerized workloads, APIs, and Kubernetes-based environments.\nExperience working with identity and access management, secrets management, and role-based access control models.\nExperience generating security evidence, remediation reporting, and security metrics for leadership and compliance stakeholders.\nExperience working within Agile software delivery environments.\nExperience influencing engineering teams and driving security improvements without direct organizational authority.\nExperience collaborating effectively with software engineering, architecture, operations, security, and product management teams.\nPreferred Experience\nExperience supporting SaaS, IoT, telemetry, or real-time data platforms.\nExperience supporting platforms operating under 24x7 availability requirements.\nExperience supporting Azure-based data platforms.\nExperience working within globally distributed engineering organizations.\nExperience supporting external audits, penetration testing programs, and compliance initiatives.\nExperience working within regulated enterprise environments.\nExperience supporting ISO 27001-aligned environments.\nExperience applying IEC 62443 security principles within industrial or operational technology environments.\nExperience supporting SOC 2 readiness programs or equivalent security control frameworks.\nExperience implementing security programs aligned with NIST Cybersecurity Framework (CSF), NIST Secure Software Development Framework (SSDF), or similar industry frameworks.\nPreferred Qualifications\nMicrosoft Certified: Azure Security Engineer Associate (AZ-500).\nMicrosoft Certified: Azure DevOps Engineer Expert (AZ-400).\nCertified Information Systems Security Professional (CISSP).\nCertified Cloud Security Professional (CCSP).\nCertified Secure Software Lifecycle Professional (CSSLP).\nCertified Kubernetes Security Specialist (CKS).\nGIAC Cloud Security Automation (GCSA).\nSuccess Measures\nSuccess in this role will be measured by:\nReduction of security debt and vulnerability backlog.\nTimely remediation of critical and high-risk vulnerabilities.\nEffective operation and adoption of SonarQube, BDBA, SBOM, and security automation tooling.\nImproved Secure SDLC adoption across engineering teams.\nHigh-quality and audit-ready release security evidence.\nSuccessful support of CPCERT, penetration testing, and security review activities.\nReduction in recurring security findings.\nImproved visibility into platform security posture through actionable metrics and reporting.\nSustainable alignment with Schneider Electric security requirements and engineering standards.\n What's in it for me?\nLead transformative projects that protect critical infrastructure and make a measurable impact\nWork with cutting-edge technologies and solve complex cybersecurity challenges across diverse industries\nCollaborative culture that values technical excellence, innovation, and continuous professional development\nAccess to certifications, training, and resources that accelerate your career growth\nBring your cybersecurity expertise to a team that's ready to support your success - apply today!\n At Schneider, we believe that every employee is a talent who deserves equal opportunities. This means you matter. Every individual needs to feel valued, supported, and treated fairly to do their best work.\nOur Total Rewards is our way of saying: “We see you. We value you”. It’s more than just pay and benefits- it’s a meaningful investment in you. It is designed for you to perform, grow, feel safe, and elevate your potential to shine as an impact maker.\nFor this U.S. based position, the expected pay range is USD 142,400 - USD 213,600 per year. This pay range includes base pay and short-term incentives. The compensation range for this full-time position applies to candidates located within the United States. Our pay ranges are determined by reviewing roles of similar responsibility and level. Within the pay range, individual pay is determined by several factors including performance, knowledge, job-related skills, experience, and relevant education or training.\nSchneider Electric is there when it matters...","description_format":"text","description_chars":15846,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Life insurance","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Industrial Automation","Information Security","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-10-21T10:37:24Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.586,"p_room":0.75,"age_days":25,"expected_fill_days":30,"reasons":["conf:1","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":213600,"is_top_pay":true},"html_url":"https://alion.io/job/schneider-electric-principal-devsecops-engineer","json_url":"https://alion.io/job/schneider-electric-principal-devsecops-engineer.json","meta":{"generated_at":"2026-10-27T08:05:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8849,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1266},"rest":"https://alion.io/mcp/rest/get_company?id=1266"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fschneider-electric-principal-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fschneider-electric-principal-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fschneider-electric-principal-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/schneider-electric-principal-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fschneider-electric-principal-devsecops-engineer"}]}