Cybersecurity Lead Engineer

The Cybersecurity Lead Engineer is responsible for the technical execution, delivery, and lifecycle management of cybersecurity solutions and services for Schneider Electric's external customers. The role serves as a trusted customer-facing cybersecurity consultant and technical lead, responsible for cybersecurity requirements definition, solution design, implementation, hardening, verification, validation, commissioning, and operational support across industrial and critical infrastructure environments.

The Cybersecurity Lead Engineer works closely with customers, project managers, account managers, engineering teams, vendors, and other stakeholders to ensure cybersecurity solutions are delivered in accordance with customer requirements, project objectives, contractual commitments, and industry standards. The role also supports business growth by identifying cybersecurity opportunities, providing technical consultation, and promoting Schneider Electric cybersecurity services and capabilities.

What will you do? Customer Engagement & Consulting

• Act as the primary technical cybersecurity interface between Schneider Electric and customers throughout the project lifecycle.
• Lead customer workshops to gather, analyze, clarify, and document cybersecurity requirements.
• Build trusted relationships with customer technical teams, operations personnel, project managers, consultants, and executive stakeholders.
• Present cybersecurity architectures, assessment findings, technical recommendations, risk mitigation strategies, and remediation plans.
• Support Account Managers and Sales teams in identifying, qualifying, and developing cybersecurity opportunities.
• Provide technical consultancy and guidance on OT/ICS cybersecurity best practices, standards, and technologies.
• Deliver cybersecurity awareness and end-user training programs when required.

Requirements Engineering & Solution Design

• Capture, analyze, formulate, document, and manage cybersecurity requirements derived from customer specifications, contractual obligations, regulations, and applicable standards.
• Develop cybersecurity architectures and implementation strategies for OT, industrial automation, and critical infrastructure environments.
• Perform security gap assessments and define remediation requirements for existing systems.
• Ensure cybersecurity requirements are traceable from design through implementation, testing, and acceptance.
• Evaluate existing and emerging cybersecurity technologies to recommend appropriate solutions.

Documentation & Governance

• Develop, review, maintain, and obtain customer approval for cybersecurity documentation, including:

• Cybersecurity Management Plans (CSMP)

• Cybersecurity Requirement Specifications

• Security Architecture Documents

• Network Segmentation Designs

• Hardening Standards and Procedures

• Security Test Procedures

• Security Policies and Standards

• Backup and Recovery Procedures

• Operational Cybersecurity Documentation

• Verification and Validation Reports

• Compliance and Audit Reports

• Ensure all cybersecurity deliverables comply with customer specifications, contractual requirements, industry standards, and Schneider Electric methodologies.

• Support internal and external audits, assessments, and compliance activities.

Security Hardening & Implementation

• Lead cybersecurity implementation and hardening activities across OT and IT infrastructure.

• Configure and secure:

• Windows Servers and Workstations

• Active Directory environments

• Virtualized infrastructure

• Firewalls and network infrastructure

• SCADA systems

• DCS platforms

• HMIs

• Engineering Workstations

• Data Historians

• Backup and Recovery Systems

• Implement cybersecurity controls aligned with IEC 62443, ISA/IEC 62443 (ISA99), NIST, ISO 27001, CIS Benchmarks, and Schneider Electric cybersecurity standards.

• Support vulnerability remediation, patch management, system security improvements, and secure configuration management activities.

Verification, Validation & Testing

• Develop cybersecurity verification and validation plans and procedures.

• Execute security testing, compliance verification, and configuration reviews.

• Conduct vulnerability assessments and technical security evaluations.

• Verify implemented cybersecurity controls meet customer requirements and project specifications.

• Support and participate in:

• Factory Acceptance Testing (FAT)

• Site Acceptance Testing (SAT)

• Integrated System Testing (IST)

• Commissioning Activities

• Operational Readiness Reviews

• Produce verification reports and support customer acceptance activities.

Project Delivery & Operational Support

• Execute cybersecurity project activities within approved scope, schedule, quality, and budget requirements.
• Coordinate with project managers, system engineers, vendors, and customer teams to ensure successful delivery.
• Perform site visits, maintenance activities, upgrades, troubleshooting, and support services.
• Take ownership of assigned work packages and technical deliverables.
• Support commissioning, handover, and transition to operations.

What qualifications will make you successful?

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline, plus one or more of the following certifications:

• Cisco Certified Network Associate Security (CCNA Security)

• Certified Cloud Security Professional (CCSP)

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified Information Systems Auditor (CISA)

• Certified Ethical Hacker (CEH)

• Global Industrial Cyber Security Professional (GIAC-GICSP)

• Computer Hacking Forensic Investigator (CHFI)

• ISA/IEC 62443 (ISA99) or IC32-34 related OT cybersecurity certification

Preferred Experience

• Experience working within Operational Technology (OT) and Industrial Control System (ICS) environments.

• Experience with one or more of the following technologies:

• Distributed Control Systems (DCS)

• Supervisory Control and Data Acquisition (SCADA)

• Programmable Logic Controllers (PLC)

• Human Machine Interfaces (HMI)

• Industrial Data Historians including OSI PI, EDNA, Wonderware Historian and similar platforms

• Understanding of cybersecurity frameworks and standards including:

• IEC 62443 / ISA99

• NIST Cybersecurity Framework

• NCSC Guidance

• ISO 27001

• COBIT

• Understanding of industrial communication protocols including:

• BACnet

• Modbus

• PROFINET

• PROFIBUS

• Experience installing, configuring, and managing:

• Intrusion Detection Systems (IDS)

• Intrusion Prevention Systems (IPS)

• Experience implementing and managing network security solutions including:

• Fortinet

• Cisco

• Juniper

• Palo Alto

• Experience implementing and supporting virtualization environments including:

• VMware

• Microsoft Hyper-V

• Experience performing advanced Windows administration including:

• Active Directory

• DNS

• DHCP

• RAS

• WSUS

• Group Policy (GPO)

• Experience implementing and managing endpoint and host-based security technologies including:

• Antivirus Solutions

• Data Loss Prevention (DLP)

• Host IPS

• Application Whitelisting

• EDR

• XDR

• NDR

• Experience implementing backup, storage, and recovery technologies including:

• Veritas

• Symantec

• Acronis

• Veeam

• NAS

• SAN

• Experience developing and delivering cybersecurity training programs.

• Experience developing, evaluating, implementing, and maintaining cybersecurity policies, standards, procedures, and governance frameworks.

• Experience creating, reviewing, approving, and managing cybersecurity documentation and customer deliverables.

• Experience performing system hardening, compliance validation, cybersecurity assessments, and remediation planning.

• Experience supporting FAT, SAT, commissioning, and customer acceptance activities.

• Experience in customer-facing consulting and technical advisory roles.

Competencies

• Excellent consulting, communication, and presentation skills.
• Strong customer-facing and stakeholder management capabilities.
• Ability to identify, prioritize, negotiate, and address customer needs while anticipating risks, challenges, and opportunities.
• Strong analytical and problem-solving skills, with the ability to evaluate information from multiple sources and develop effective solutions.
• Ability to translate business, operational, and regulatory requirements into practical cybersecurity solutions.
• Strong requirements management and technical governance skills.
• Strong technical writing skills with experience producing customer-facing deliverables and technical reports.
• Strong attention to detail in documentation, compliance verification, and quality assurance activities.
• Effective project planning, organization, and time management skills.
• Ability to work independently and take full ownership of assigned responsibilities.
• Ability to execute projects and support customers at remote locations when required.
• Strong collaboration skills across multidisciplinary engineering and project teams.

Rewards designed for you

Our Total Rewards is our way of saying: We see you and we value you. It’s more than just pay and benefits—it’s a meaningful investment in you. It is designed to help you perform, grow, feel safe, and elevate your potential. The package helps you care for yourself and your family, plan your future, grow your skills and career, collaborate in an inclusive workplace, and contribute to your community. At Schneider Electric, we’re here for what matters most to you. Discover more at our Career Page.

• Country-specific programs and initiatives may be available.

Looking to make an IMPACT with your career? When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values – Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork – starts with us.

IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.

We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.

Become an IMPACT Maker with Schneider Electric – apply today!

€40 billion global revenue

+9% organic growth

150 000+ employees in 100+ countries

You must submit an online application to be considered for any position with us. This position will be posted until filled.

Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do. At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.