What will you do?You will serve as the dedicated security engineer for our on-premises Data Center Infrastructure Management (DCIM) software. Customers deploy these products within their own data centers as hardened virtual or hardware appliances, or as packaged software on customer-managed Linux hosts.
You will develop deep expertise in these offers and serve as a security subject matter expert throughout the Secure Development Lifecycle. Working closely with engineering teams, product owners, Security Advisors, and other cybersecurity partners, you will identify, assess, prioritize, and help resolve product security risks and vulnerabilities.
Key Responsibilities- Vulnerability Management: Triage vulnerability reports from scanners such as Snyk, Dependabot, container scanning, and Nessus, as well as internal security teams, external researchers, and testing firms. Assess exploitability and severity using CVSS 3.1/4.0 and drive findings through resolution.
- Security Testing & Disclosure: Coordinate internal and external penetration testing and programs such as CyTRICS. Reproduce and validate findings, verify fixes, and partner with PSIRT on coordinated vulnerability disclosure and customer security notifications.
- Release Security: Lead security reviews for product releases, collect required security evidence and artifacts, and work with the product security organization through release approval.
- Product Security & Customer Assurance: Maintain risk assessments, threat models, security documentation, and customer security information. Support requirements associated with cybersecurity regulations such as the EU Cyber Resilience Act (CRA).
- Secure Development: Review designs and code for vulnerabilities involving authentication, authorization, SSRF, XXE, path traversal, session management, security logging, and secrets management. Guide or implement remediation and develop negative security tests.
- Software Supply Chain & Hardening: Maintain comprehensive SBOMs for released products. Partner with DevOps to ensure effective security scanning within build pipelines, support release/package signing, and define security-hardening requirements for appliances and customer-managed Linux environments.
What qualifications will make you successful?- 7+ years of experience in software engineering or cybersecurity, including 3+ years in product or application security.
- Ability to review Java/Spring, TypeScript, and Linux configurations to investigate and validate security findings.
- Hands-on experience with SCA and vulnerability scanning tools, CVSS, CWE, and OWASP Top 10.
- Working knowledge of IEC 62443-4-1/4-2, NIST SSDF, or comparable secure development standards.
- Knowledge of applied cryptography, FIPS 140-3 modes, PKI/TLS, LDAP, SAML, OAuth2, container/Kubernetes security, and SBOM formats such as CycloneDX or SPDX.
- Experience triaging externally reported vulnerabilities and supporting coordinated vulnerability disclosure.
- Strong communication skills with developers, product managers, Legal, customers, security researchers, and external testing organizations.
Preferred Qualifications- Experience with cybersecurity legislation or regulation, including the EU Cyber Resilience Act.
- Experience managing penetration testing or external security-testing programs such as CyTRICS.
- Ability to implement security fixes in Java/Spring or TypeScript.
- Experience using AI-assisted tools for secure code review or vulnerability discovery.
- Relevant security certification such as GIAC GWEB, OSWE, CKS, or CSSLP.
Bring your cybersecurity expertise to a team that values innovation and excellence - apply today!
At Schneider, we believe that every employee is a talent who deserves equal opportunities. This means you matter. Every individual needs to feel valued, supported, and treated fairly to do their best work.
Our Total Rewards is our way of saying: "We see you. We value you". It's more than just pay and benefits- it's a meaningful investment in you. It is designed for you to perform, grow, feel safe, and elevate your potential to shine as an impact maker.
For this U.S. based position, the expected pay range is USD 117,600 - USD 176,400 per year. This pay range includes base pay and short-term incentives. The compensation range for this full-time position applies to candidates located within the United States. Our pay ranges are determined by reviewing roles of similar responsibility and level. Within the pay range, individual pay is determined by several factors including performance, knowledge, job-related skills, experience, and relevant education or training.
Schneider Electric is there when it matters most to you
Our Total Rewards package outlines all the benefits and support you'll enjoy as part of the Schneider Electric team:
Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive: medical (with member reward points), dental, vision, and basic life insurance, Benefit Bucks, flexible work arrangements, paid family leaves, well-being programs, 12 holidays per year, and 15 days of paid time off per year.
Invest and Plan Your Future. We help you plan and invest for the future with competitive pay and programs including base salary, incentives, company share ownership, and 401(k) with match.
Grow Your Skills and Career. We support development through performance discussions, global opportunities, the Schneider Career Hub, and learning platforms like Coursera.
Team Up in the Workplace. We encourage collaboration, recognition, sharing your voice, and an inclusive workplace.
Support Your Community. We make a difference through volunteer leave, programs with the Schneider Electric Foundation , youth education initiatives, and military leave benefits.
If you believe this job posting is not compliant with applicable state pay transparency laws in the U.S., please notify the Company as soon as possible upon discovery by completing this form Job Posting Compliance Form .
Looking to make an IMPACT with your career? When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values - Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork - starts with us.
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.
Become an IMPACT Maker with Schneider Electric - apply today!
€40 billion global revenue
+9% organic growth
150 000+ employees in 100+ countries
You must submit an online application to be considered for any position with us. This position will be posted until filled.
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and 'inclusion' is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.
At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here
Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.
Responsibilities
What will you do?You will serve as the dedicated security engineer for our on-premises Data Center Infrastructure Management (DCIM) software. Customers deploy these products within their own data centers as hardened virtual or hardware appliances, or as packaged software on customer-managed Linux hosts.
You will develop deep expertise in these offers and serve as a security subject matter expert throughout the Secure Development Lifecycle. Working closely with engineering teams, product owners, Security Advisors, and other cybersecurity partners, you will identify, assess, prioritize, and help resolve product security risks and vulnerabilities.
Key Responsibilities- Vulnerability Management: Triage vulnerability reports from scanners such as Snyk, Dependabot, container scanning, and Nessus, as well as internal security teams, external researchers, and testing firms. Assess exploitability and severity using CVSS 3.1/4.0 and drive findings through resolution.
- Security Testing & Disclosure: Coordinate internal and external penetration testing and programs such as CyTRICS. Reproduce and validate findings, verify fixes, and partner with PSIRT on coordinated vulnerability disclosure and customer security notifications.
- Release Security: Lead security reviews for product releases, collect required security evidence and artifacts, and work with the product security organization through release approval.
- Product Security & Customer Assurance: Maintain risk assessments, threat models, security documentation, and customer security information. Support requirements associated with cybersecurity regulations such as the EU Cyber Resilience Act (CRA).
- Secure Development: Review designs and code for vulnerabilities involving authentication, authorization, SSRF, XXE, path traversal, session management, security logging, and secrets management. Guide or implement remediation and develop negative security tests.
- Software Supply Chain & Hardening: Maintain comprehensive SBOMs for released products. Partner with DevOps to ensure effective security scanning within build pipelines, support release/package signing, and define security-hardening requirements for appliances and customer-managed Linux environments.
