ICS Cybersecurity Lead Engineer

About Schneider Electric

Schneider Electric is dedicated to creating impactful solutions by empowering the efficient and sustainable use of energy and resources worldwide. Our mission centers on being a trusted ally in sustainability and efficiency, emphasizing strong partnerships grounded on trust.

Position Overview

We are seeking an ICS Cybersecurity Lead Engineer to join our Center of Expertise team within the Industrial Automation division. The role involves leading or supporting the delivery of cybersecurity projects for Industrial Control Systems (ICS), ensuring robust protection for operational technology (OT) environments.

Key Responsibilities

• Lead or assist in cybersecurity projects targeting OT systems and networks, covering design, planning, execution, and delivery phases.
• Deploy cybersecurity controls to safeguard OT environments effectively.
• Evaluate security postures of OT infrastructures to detect vulnerabilities and implement remediation strategies.
• Conduct or participate in risk and vulnerability assessments on client OT systems.
• Offer expert advice on OT cybersecurity best practices and emerging technologies.
• Design, configure, and upkeep cybersecurity measures for OT networks.
• Collaborate across teams to embed cybersecurity within OT projects and operational processes.
• Stay abreast of evolving OT cybersecurity trends, threats, and methodologies.
• Lead or take part in cybersecurity-related Factory and Site Acceptance Testing (FAT/SAT).
• Develop and deliver comprehensive technical documentation such as Functional Design Specifications (FDS), Detailed Design Specifications (DDS), FAT reports, and Method of Statement (MOS).

Qualifications and Experience

• Possess a Master’s degree in Cybersecurity, Computer Science, or related fields.
• Demonstrate 1 to 8 years of hands-on experience managing or installing network firewalls (Cisco, Fortinet, Juniper, or equivalent).
• Have 1 to 8 years of advanced Layer 2/Layer 3 network configuration and implementation experience.
• Utilize network troubleshooting tools such as packet sniffers for 1 to 8 years.
• Experience with network-based Intrusion Detection Systems for 1 to 8 years.
• Implement endpoint security solutions including Antivirus, Data Leakage Prevention, Host IPS, and application whitelisting over 1 to 8 years.
• Apply system backup strategies with 1 to 3 years of exposure.
• Proficient in scripting and programming languages such as Python, PowerShell, and Bash within 1 to 8 years.
• Use vulnerability discovery, scanning, and penetration testing tools like Nessus, Qualys, ZAP Proxy, Burp Suite, and Metasploit for 1 to 8 years.
• Knowledgeable in OT Security Operations Center (SOC) and Incident Response protocols.
• Familiarity with OT Industrial Control Systems and standards including IEC 62443, NIST, QCERT, and the Zones and Conduits model.
• Strong foundation in cybersecurity concepts, network fundamentals, cyber defense techniques including MITRE ATT&CK framework, and red teaming methodologies.
• Hold relevant certifications such as CCNA/CCNP, CompTIA Security+, CEH, CISSP, or IEC-62443 equivalents.
• Excellent analytical, problem-solving abilities, and communication skills.
• Capacity to thrive in dynamic, fast-moving environments.

Additional Information

• Travel commitment required: at least 30% of the time.
• On-site presence requirement: 50% or more.

Culture and Values

At Schneider Electric, we foster a culture rooted in Inclusion, Mastery, Purpose, Action, Curiosity, and Teamwork — values that collectively empower sustainability and innovation. We are committed to diversity, equity, and upholding the highest ethical standards, ensuring a workplace where all individuals are valued and respected.