Staff, Senior Design Engineer (Security Engineer)

Bachelor's Degree in a related Cybersecurity/IT/Computer Science field. Lead engagements from the kickoff with product owners through scoping engagements, penetration testing, and reporting while adhering to the agreed scope and deadlines. Minimum 3+ years of experience in product penetration testing. Knowledge of TCP/IP, OSI Layer, IPv4 & IPv6, OT Networks Protocols, and Wireless Communication skills preferred. Knowledge of at least one scripting language such as python, shell script, ruby, javascript, etc. Research fuzz testing tools and conduct penetration tests Ability to develop detailed PoCs, train product team, and promote security awareness. Experience with the Schneider Electric product line and Industries is desirable but not essential Experience with Host-based security technologies (Antivirus, Data Leakage Prevention, Host IPS, Whitelisting) and advanced system administration (Windows Active Directory) Tools - Experience in security assessment tools (e.g. NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux tools, Fuzzing tools) Experience with ICS security industry practices with comprehensive working knowledge in one or more of the following: IEC 62443/ISA 99, ISO 27001/2, NIST SP 800-82. We are looking for a senior security engineer whose main objective is to help with the execution of vulnerability management and setting up penetration testing in the Process Automation (PA) line of business. Main missions\ Lead the vulnerability management execution with the PA R&D Cybersecurity Compliance Leader. Coordinate vulnerability remediation activities, including analyzing vulnerability data and identifying trends and patterns Lead and drive the penetration testing activities for all products in the PA Offer. You'll perform vulnerability assessments & penetration testing on networks, desktop, Edge, cloud, and mobile applications. You'll identify and exploit vulnerabilities in products under test You'll support research on emerging security topics, new attack vectors and keep up-to date Youll contribution to threat modeling, test scenario design & execution, industry-standard issue-reporting, collaboration with development teams to support fulfilment of security obligations etc Support Product teams with SDL and certification activities. Support PA R&D Cyber-security director by setting up POCs and evaluating the new cutting-edge security technologies. .