We are looking for a senior security engineer whose main objective is to help with the execution of vulnerability management and setting up penetration testing in the Process Automation (PA) line of business. Main missions: • Lead the vulnerability management execution with the PA R&D Cybersecurity Compliance Leader. • Coordinate vulnerability remediation activities, including analyzing vulnerability data and identifying trends and patterns • Lead and drive the penetration testing activities for all products in the PA Offer. • You'll perform vulnerability assessments & penetration testing on networks, desktop, Edge, cloud, and mobile applications. • You'll identify and exploit vulnerabilities in products under test • You'll support research on emerging security topics, new attack vectors and keep up-to date • You’ll contribution to threat modeling, test scenario design & execution, industry-standard issue-reporting, collaboration with development teams to support fulfilment of security obligations etc • Support Product teams with SDL and certification activities. • Support PA R&D Cyber-security director by setting up POCs and evaluating the new cutting-edge security technologies. • Bachelor's Degree in a related Cybersecurity/IT/Computer Science field. • Lead engagements from the kickoff with product owners through scoping engagements, penetration testing, and reporting while adhering to the agreed scope and deadlines. • Minimum 3+ years of experience in product penetration testing. • Knowledge of TCP/IP, OSI Layer, IPv4 & IPv6, OT Networks Protocols, and Wireless Communication skills preferred. • Knowledge of at least one scripting language such as python, shell script, ruby, javascript, etc. • Research fuzz testing tools and conduct penetration tests • Ability to develop detailed PoCs, train product team, and promote security awareness. • Experience with the Schneider Electric product line and Industries is desirable but not essential • Experience with Host-based security technologies (Antivirus, Data Leakage Prevention, Host IPS, Whitelisting) and advanced system administration (Windows Active Directory) • Tools - Experience in security assessment tools (e.g. NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux tools, Fuzzing tools) • Experience with ICS security industry practices with comprehensive working knowledge in one or more of the following: IEC 62443/ISA 99, ISO 27001/2, NIST SP 800-82.