Senior Security Engineer

Tech Jobs for Good; United States; Remote; USD 118,000 - 176,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Flexible work arrangements

401(k) with match

Paid time off

Job summary

Schneider Electric is seeking a Senior Security Engineer to fortify application security through hands-on work and strategic initiatives. You will implement security controls, manage alerting, and lead security training across teams in a fast-paced environment.

The role emphasizes collaboration with IT and Platform teams, conducting security reviews, and staying current with web security best practices and AWS services. U.S.-based position with comprehensive rewards.

Qualifications

• 7+ years of demonstrated experience in writing and deploying secure code, including proficiency in Infrastructure as Code (IaC).
• Strong problem-solving skills with the ability to integrate security into legacy systems and ensure high-quality, reviewable pull requests.
• Experience configuring and managing monitoring and alerting systems for web applications, balancing proactive and reactive tasks.
• Track record of delivering impactful training sessions to technical teams, communicating complex security concepts clearly.
• Experience in reviewing and critiquing architecture proposals with a focus on security.
• In-depth knowledge of web security principles (cookies, security headers, DNS) and AWS security services.

Responsibilities

• Hands-On Security Enhancements: implement and refine security measures for infrastructure, including IaC and templates.
• Monitoring and Incident Management: set up security alerting systems and triage findings to address critical issues.
• Training and Development: lead security training sessions and design exercises for incident readiness.
• Collaborative Security Leadership: partner with IT/Platform teams, engage with security vendors, and contribute to architecture reviews.

Skills

Secure coding

IaC

Threat monitoring

Incident management

Security training

Security architecture review

AWS security

Tools

CDK

Cognito

Datadog

Job description

Job Description

As a Senior Security Engineer at EnergySage, you will play a pivotal role in fortifying our application security through both hands-on technical work and strategic initiatives.

What You'll Do:

• Hands-On Security Enhancements:
  • Implement and refine security measures for our infrastructure, including writing code and developing Infrastructure as Code (IaC) solutions.
  • Create and maintain security reference implementations and templates to streamline best practices across the team.
• Monitoring and Incident Management:
  • Set up, configure, and manage security alerting systems to ensure proactive threat detection.
  • Regularly review and triage security findings, assess their urgency, and take appropriate action to address and elevate critical issues.
• Training and Development:
  • Lead and deliver training sessions to elevate the security expertise of our team, covering topics from AppSec basics to advanced concepts.
  • Design and conduct exercises to prepare the team for potential security incidents and disaster recovery scenarios.
• Collaborative Security Leadership:
  • Work closely with IT and Platform teams to manage permissions and configurations securely.
  • Engage with the SE security team and vendors on security audits, scans, and assessments, fostering strong relationships with key stakeholders.
  • Contribute to architecture and security review processes, offering valuable insights to enhance overall security posture.

What We Look For:

To thrive in this role, we are looking for someone who embodies the following qualities and experiences:

• Proven Technical Expertise:
  • 7+ years of demonstrated experience in writing and deploying secure code, including proficiency in Infrastructure as Code (IaC).
  • Strong problem-solving skills with the ability to integrate security into legacy systems and ensure high-quality, reviewable pull requests.
• Monitoring and Alerting Skills:
  • Experience in configuring and managing monitoring and alerting systems for web applications, with a knack for balancing proactive and reactive tasks.
  • Ability to consolidate information from various sources and manage security alerts efficiently, including responding to active threats.
• Effective Trainer and Communicator:
  • Track record of delivering impactful training sessions to technical teams, with a clear ability to communicate complex security concepts to both technical and non-technical audiences.
  • Skill in adapting training approaches for different audiences and addressing any misunderstandings effectively.
• Strategic Security Reviewer:
  • Experience in reviewing and critiquing architecture proposals with a focus on security.
  • Proven ability to challenge and improve security proposals while balancing technical authority with approachability.
• Technical Proficiencies:
  • In-depth knowledge of web security principles (e.g., cookies, security headers, DNS) and AWS (e.g., networking, IAM roles, Infrastructure as Code).
  • Familiarity with CDK, Cognito, and Datadog is advantageous.
• Relevant Experience:
  • Hands-on experience in security engineering and incident management, ideally within a fast-paced B2C environment.
  • Background in briefing executives and delivering security training sessions to technical teams is preferred.

At Schneider, we believe that every employee is a talent who deserves equal opportunities. This means you matter. Every individual needs to feel valued, supported, and treated fairly to do their best work.

Our Total Rewards is our way of saying: "We see you. We value you". It is more than just pay and benefits- it's a meaningful investment in you. It is designed for you to perform, grow, feel safe, and elevate your potential to shine as an impact maker.

For this U.S. based position, the expected pay range is USD 117,600 - USD 176,400 per year. This pay range includes base pay and short-term incentives. The compensation range for this full-time position applies to candidates located within the United States. Our pay ranges are determined by reviewing roles of similar responsibility and level. Within the pay range, individual pay is determined by several factors including performance, knowledge, job-related skills, experience, and relevant education or training.

Schneider Electric is there when it matters most to you

Our Total Rewards package outlines all the benefits and support you'll enjoy as part of the Schneider Electric team:

Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive: medical (with member reward points), dental, vision, and basic life insurance, Benefit Bucks, flexible work arrangements, paid family leaves, well-being programs, 12 holidays per year, and 15 days of paid time off per year.

Invest and Plan Your Future. We help you plan and invest for the future with competitive pay and programs including base salary, incentives, company share ownership, and 401(k) with match.

Grow Your Skills and Career. We support development through performance discussions, global opportunities, the Schneider Career Hub, and learning platforms like Coursera.

Team Up in the Workplace. We encourage collaboration, recognition, sharing your voice, and an inclusive workplace.

Support Your Community. We make a difference through volunteer leave, programs with the Schneider Electric Foundation, youth education initiatives, and military leave benefits.

When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values - Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork - starts with us.

IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.

We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.