Security Advisor / App Sec Engineer (F/H)

Job Description

At Schneider Electric, we are committed to solving real-world problems to create a sustainable, digitized, new electric future. Artificial Intelligence has the potential to transform industries and help unlock efficiency and sustainability.

Within our Global AI Hub we combine our long-standing manufacturing and domain expertise with cutting-edge innovation in AI, machine learning, and deep learning to empower smarter decision-making, agility, and decarbonization.

Simultaneously, as the number of cybersecurity threats continues to grow, we recognize the importance of having a comprehensive cybersecurity approach across our solutions to safeguard our business and customers.

We seek a cybersecurity professional to join our AI Digital Risk Leader & Data Officer team to drive the implementation of Secure development process in our AI organization.

Your role :

To ensure a cohesive cybersecurity strategy implemented throughout our AI Hub, you will collaborate closely with AI Cybersecurity teams but also autonomous spokes team in North America and Global Supply Chain.

The Security Advisor is responsible for the adoption and implementation of the SDL framework following the Schneider Electric SDL V2 process and in compliance to the SE SDL Policy and other cybersecurity policies, procedures, and best practices, and to advise on cybersecurity technical requirements for the development of secure products and systems.

You will regularly interact with key stakeholders (including representatives from marketing, R&D offer development, technical leaders, and leadership team members) as well as stakeholders from the Business Unit Security Team and the corporate Product Security Office (PSO) to ensure that cybersecurity guidelines and processes are executed in an efficient and effective manner.

Your missions : 

• Act as Subject Matter Expert, serve as a consultant and advisor for cybersecurity topics within AI development teams. Provide guidance, coaching and expertise to execute SDL practices such as threat modelling, secure design practices, secure coding and implementation, and security testing.
• Gather SDL and Cybersecurity metrics to contribute to data driven strategies and plans to aid in the deployment of SDL and cybersecurity functionality as required by cybersecurity standards such as IEC62443, and to further improve SDL and Cybersecurity effectiveness and efficiency.
• Ensure that their assigned development teams abide with risk-driven cybersecurity processes and controls.
• Support development teams to manage vulnerability triage and resolution
• Support internal SDL audits and Formal Cybersecurity Reviews (FCSRs) and other supported Schneider data security and privacy processes.
• Conduct training and presentations to build cybersecurity competencies within teams.
• Track organizational maturity using cybersecurity maturity frameworks and track other SDL-related goals as directed.

Your profile :

• Master’s degree in Computer Science, Software Development or Cybersecurity
• + 6 years experience in Application Security Engineering
• Experience of working in an Engineering/R&D group following a Secure Development Lifecycle based on standards such as IEC 62443, ISO 21434, or Microsoft SDL with a proven ability to engage with management and development teams.
• Certification in Cybersecurity Management such as CISSP, CSSLP; and/or IEC 62443 Certified Specialist.
• Knowledge of static code analysis tools, secure coding standards, fuzz and penetration testing, and formal security reviews.
• Demonstrated ability to develop threat models, analysing threats, and rate threat severity using established industry practices
• Ability to align operational/information security policies with business requirements.
• Process driven with attention to detail, ability to translate operational/information security requirements into security controls in coordination with architects.
• Ability to effectively adapt to and apply rapidly changing technology and security requirements to business needs.
• Working knowledge of security and privacy standards, regulations, and legislation.
• Experience guiding and assisting organizations in implementing security product/system development practices.
• Customer-oriented with a service-oriented attitude (flexible, personable, and approachable)
• Experience in driving corporate programs using influence, negotiation, and persuasion soft skill set.
• An understanding of domain appropriate communication mechanisms protocols
• Strong communication skills, including the ability to render concise reports, summaries, and presentations.
• Project management or technical leadership skills would be an asset
• Experience with AI and ML technologies and services (Machine Learning, Conversational AI, Computer Vision, No Code / Low Code AI)

We know skills and competencies show up in many ways and can be based on your life experience. If you do not necessarily meet all the requirements that are listed, we still encourage you to apply.

Our offer includes attractive remuneration and goes far beyond that. We offer competitive benefits, a work environment that encourages professional development, a qualitative onboarding and accompaniment throughout the different stages of your life (training, career opportunities, parenting, flexibility …), in a great workplace.

#LI-SM1

About Our Company

Why us?

Schneider Electric is leading the digital transformation of energy management and automation. Our technologies enable the world to use energy in a safe, efficient and sustainable manner. We strive to promote a global economy that is both ecologically viable and highly productive.

€25.7bn global revenue

137 000+ employees in 100+ countries

45% of revenue from IoT

5% of revenue devoted for R&D

You must submit an online application to be considered for any position with us. This position will be posted until filled

It is the policy of Schneider Electric to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct. Concerning agencies: Schneider Electric does not accept unsolicited resumes and will not be responsible for fees related to such.

Read Full Description