You join the Governance & Technology department, and more specifically, the Cybersecurity Global testing & Tools team (About ~50 people) spread across 4 countries of France, USA, India & China.

This team has a mandate to do Penetration tests of all offers of SE, which means you get a chance to work on multiple technologies, domains in cybersecurity.

This role is very critical for the company and the penetration test results impact the Sell stage gate of Schneider Electric products.

Your missions:

• The main job involves execute tests based on formal Test Procedures on IoT & IT products and applications .
• Work with project teams to explain the Vulnerabilities.
• Create and enhance the Test Procedures and methods.
• Work closely with other Pen testers, project teams and SDL process teams to work on research, investigations, definition of standard operating Procedures. deployments, training, creating assets for efficiency in the cyber-security practices.
• Strong knowledge and experience of various tools used in Security testing; related to SCA, SAST, DAST, Vulnerability & penetration testing tools.
• Investigate potential 3 rd party cyber security offer\tools (startup, etc.) to improve the global security level of our offers
• Understand impact of various standards like IEC 62443 \ Data Privacy (US, GDPR...), CRA, IoT/Edge/cloud standard and regulation and make proposals for the improvement in our testing practices.
• Must be able to share and explain(defend) the reports\findings with project teams and Sr Managements.

• An Engineering or master's degree in computer , electrical, electronic or information security.
• About 5-8 years of Hands-on Experience in conducting Penetration tests on products
• OSCP or GPEN or equivalent certification related to penetration testing.
• Possesses advanced knowledge in the key principles and practices of Penetration Testing, Procedures, CVSS etc.
• Knowledge in risk analysis methods and Threat modeling
• Good Knowledge about Security Technologies like network, access control, cryptography etc.
• Skills and experience in all levels of pen testing from high level analysis of scanning tools until deep low level reverse engineering attacks is a nice to have.
• Must have skills\expertise in scripting languages to automate.
• Mastery in English and French languages.
• Should have Knowledge in R&D Development\testing processes\tools used in waterfall, agile etc.
• Experience on Vulnerability research is a plus.
• knowledge of IT and\or OT products domain is a plus.

• Excellent and passionate Penetration tester
• Having excellent time \ priority management skills along with interpersonal and teamwork skills
• Autonomous & curios with real capacity to learn quickly.
• Able to work with multi culture teams across globe.
• Able to mentor and groom young people in Penetration testing.
• Able to learn new technologies like AI and use them.

• A competitive salary , an individual bonus as well as profit-sharing and participation bonuses rewarding everyone's efforts
• A range of social benefits that make life easier : a work council with a large range of offers , healthcare insurance that meets all needs , generous savings and retirement plans, an advantageous shareholding program .
• Career development through training , internal mobility ( local and international ), skills sharing , etc.
• An integration path from your first day to give you the keys to success at Schneider Electric within a culture promoting diversity , professional development and inclusion
• A good work-life balance thanks to our teleworking policy ( up to 48% of teleworking time , equipment included ), parenting support and inter-company creche .