Senior Engineer I, Cybersecurity and Data Protection Advisor

Schneider Electric is seeking a Senior Engineer I to serve as a Cybersecurity and Data Protection Advisor within IA Services & Advisory. In this onsite role in Andover, MA, you will help secure Schneider Electric’s digital ecosystem by advising on cybersecurity and privacy requirements, supporting Secure Development Lifecycle (SDL) practices, and strengthening incident response and security assurance across globally distributed teams.

This position focuses on practical guidance for engineering and program teams, including risk assessments, control reviews, security certification support, and security-by-design and privacy-by-design integration for digital solutions.

What you will do

• Lead cybersecurity and data protection engagements for Schneider Electric digital assets, including software applications, technology platforms, APIs, and digital offers.
• Partner with business, product, and engineering stakeholders to identify cybersecurity and privacy requirements and implement appropriate controls.
• Conduct risk assessments and recommend actions to mitigate identified risks.
• Review and evaluate security controls to ensure alignment with Schneider Electric cybersecurity and privacy standards.
• Support security certification and governance activities, ensuring required evidence and documentation are completed accurately and on time.
• Guide project and product teams through all phases of the Secure Development Lifecycle (SDL).
• Support cybersecurity requirements definition, risk assessments, threat modeling, penetration test reviews, and final security reviews.
• Perform third-party vendor cybersecurity assessments and identify risk mitigation measures.
• Collaborate with development teams to integrate security-by-design and privacy-by-design principles into digital solutions.
• Coordinate with Incident Response teams to validate remediation plans and support security communications when required.
• Work with R&D, Verification & Validation (V&V), and Program Management teams so products meet cybersecurity compliance requirements prior to release.
• Participate in vulnerability management, remediation planning, and continuous improvement initiatives.
• Deliver cybersecurity and privacy awareness sessions, workshops, and webinars.
• Provide clear guidance and consultation to technical and non-technical stakeholders.
• Help foster collaboration across global teams to support a strong cybersecurity culture and governance framework.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Security, Engineering, or a related field, or an equivalent combination of education and experience.
• Minimum 3 years of experience in cybersecurity, preferably supporting software development or R&D environments.
• Hands-on experience supporting Secure Development Lifecycle (SDL) activities.
• Strong knowledge of IEC 62443 cybersecurity standards.
• Experience conducting cybersecurity risk assessments and implementing risk mitigation strategies.
• Strong written and verbal communication skills, including the ability to engage stakeholders across global teams.
• Fluency in English.

Tools and technologies

• IEC 62443
• Coverity
• SonarQube
• Black Duck Hub
• Black Duck Binary Analysis
• Microsoft Threat Modeling Tool
• JFrog
• Jira
• Confluence
• TCP/IP, HTTPS, TLS, SSH
• MQTT/S
• LDAP
• Modbus, OPC-UA
• OWASP
• DevSecOps
• Secure Development Lifecycle (SDL)

Benefits

• Medical (with member reward points)
• Dental
• Vision
• Basic life insurance
• Benefit Bucks
• Flexible work arrangements
• Paid family leaves
• Well-being programs
• 12 holidays per year
• 15 days of paid time off per year
• Base salary
• Incentives
• Company share ownership
• 401(k) with match
• Performance discussions
• Global opportunities
• Schneider Career Hub
• Learning platforms like Coursera
• Volunteer leave
• Programs with the Schneider Electric Foundation
• Youth education initiatives
• Military leave benefits

Preferred qualifications

• ISA/IEC 62443 Cybersecurity Expert certification
• CISSP, CSSLP, or other recognized cybersecurity certifications
• Experience supporting industrial automation, OT, or Industrial Control System (ICS) environments
• Multilingual capabilities, including Spanish or French

Schedule: Full-time. Location: Andover, MA (onsite). Salary range: USD 101,600 - 152,400 per year.