Cybersecurity Team Lead - F/M at SCHNEIDER ELECTRIC SMART GRID SOLUTIONS LLC

, , France -

Full Time

Start Date

Immediate

Expiry Date

14 May, 26

Salary

0.0

Posted On

13 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management, Security Operations Management, Azure Security Services, Security Architecture Auditing, Security Architecture, Risk Analysis, Cybersecurity, IoT, Cloud PaaS/IaaS, Microsoft Azure, AWS, Communication, Team Leadership, Proactivity, Agile, Incident Response

Industry

Automation Machinery Manufacturing

Description

Job Description: SE DEVS Platform Operations – Cybersecurity Team Lead – SecOps Context The “DEVS” division of SE creates new business and technology capabilities for the group to develop Internet of Things enabled offers and grow Digital Services, to support our customers in their efficiency and sustainability challenges. Inside this organization, the OPS team is managing the deployment, the monitoring and the security of Preview and Production environments of ETP (Ecostruxure Technology Platform), the IoT platform of Schneider Electric fully based on the Azure could. The Ops team is organized with 4 domains: Devops, Techops, Secops, Finops. The team operates as an agile organization, focused on efficiency, collaboration and innovation. All services, offers, technological platforms, are hosted and operated in public cloud environments (Azure), and make an extensive use not only of IaaS services but also of PaaS/SaaS services. Description This is a very exciting opportunity for an experienced Cyber Security professional to head up a cyber security team, in a context of a growth (The number of Digital Offers and of Technology Platforms managed by the DevSecOps team is increasing drastically). The IoT platform is living a transformation moving to a fully integrated end to end platform. Reporting to the Operations Manager, the post-holder will lead the Cyber Security function with the help of a team and of resources on the side of Managed Service Providers. You will be responsible for ensuring that all work being completed across the various disciplines in IT are assessed in terms of vulnerabilities and exposure to internal or external attack. As part of your role, you will form an integral part of the DevSecOps team, you will vet any new project work intending on being released to production in terms of security. Daily, using tools like Alert Logic, Qualys, Prisma, SentinelOne, CP4S (…), the SecOps team: Safeguards information system assets on the public Cloud by identifying and solving potential and actual security problems by continuously monitoring for security-relevant events and configuration changes that negatively affect security posture Protects system by defining access privileges, control structures, and resources based on Best Practices & recommendations of our Public Cloud Service Providers Recognizes problems by identifying anomalies, reporting violations Assist in maturing the current cyber environment through the implementation of security improvements (by assessing current situation, evaluating trends, anticipating requirements,…) Determines security violations and inefficiencies by conducting periodic audits Keeps users informed by preparing reports and communicating system status Maintains quality service by following organization standards Maintains technical knowledge by attending educational workshops and reviewing publications Ensures that we fulfill the Crown Jewel requirements of compliance Delivers or support projects Provides guidance and expertise to the DevSecOps team in its day-to-day work Participates in a DevSecOps framework with the cybersec architects, IS officers and development teams of the IoT offers/platforms/services Gets the DevSecOps team processes and policies aligned with the SE end-to-end cybersec strategy Participates in the Incident Response process and SOC/SIEM services Assess various operational changes and engineering design changes to determine the impact on the security posture of the solution. Requirements To be successful in this role, you should be: an excellent communicator who is able to earn our stakeholders’ trust and discuss with a wide range of different profiles/cultures/management levels a team player able to find its place in our DevSecOps community and to lead it by influence a tech-savvy Information Security professional able to think beyond classic IaaS-based security paradigms: a large part of the IoT offers and platforms is PaaS- or SaaS-based (Azure/AWS) and involves IoT technologies, thus making classic IT perimetric security approaches inefficient an autonomous and proactive Information Security professional able to propose and implement solution in our agile and fast-moving IoT environment a fluent English speaker able to perform all of her/his tasks in this language, since the DevSecOps team is located in Grenoble (France), Boston (US), and Bangalore (India) To perform the tasks associated to this job, you will also have to demonstrate skills and track record with: risk management (we are not looking for an ISO27005 RM here though but rather someone familiar with this discipline) security operations management Azure security services and operations security architecture auditing, security architecture, risk analysis cybersecurity You’ll also have to be familiar either with IoT and Cloud PaaS/IaaS environments (Microsoft Azure mandatory, AWS nice-to-have), or demonstrate ability to acquire this familiarity in a challenging timeline. An experience in a small/medium organization delivering services inside a large ecosystem would be a good asset to your application. Certifications such as CISSP or ISO27k or ethical hacking would be a plus to talk for your skills but are not a requirement. Requirements To be successful in this role, you should be: an excellent communicator who is able to earn our stakeholders’ trust and discuss with a wide range of different profiles/cultures/management levels a team player able to find its place in our DevSecOps community and to lead it by influence a tech-savvy Information Security professional able to think beyond classic IaaS-based security paradigms: a large part of the IoT offers and platforms is PaaS- or SaaS-based (Azure/AWS) and involves IoT technologies, thus making classic IT perimetric security approaches inefficient an autonomous and proactive Information Security professional able to propose and implement solution in our agile and fast-moving IoT environment a fluent English speaker able to perform all of her/his tasks in this language, since the DevSecOps team is located in Grenoble (France), Boston (US), and Bangalore (India) To perform the tasks associated to this job, you will also have to demonstrate skills and track record with: risk management (we are not looking for an ISO27005 RM here though but rather someone familiar with this discipline) security operations management Azure security services and operations security architecture auditing, security architecture, risk analysis cybersecurity You’ll also have to be familiar either with IoT and Cloud PaaS/IaaS environments (Microsoft Azure mandatory, AWS nice-to-have), or demonstrate ability to acquire this familiarity in a challenging timeline. An experience in a small/medium organization delivering services inside a large ecosystem would be a good asset to your application. Certifications such as CISSP or ISO27k or ethical hacking would be a plus to talk for your skills but are not a requirement.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The role involves leading the Cyber Security function within the DevSecOps team, responsible for assessing IT work for vulnerabilities and ensuring security vetting for all new production releases. Daily tasks include continuous monitoring, defining access controls on the public Cloud, identifying anomalies, and implementing security improvements.