Senior Cybersecurity Testing and Audit Engineer

Role Overview Schneider Electric is looking for a Senior Cybersecurity Testing and Audit Engineer to join its global cybersecurity team in Hyderabad. This is a hands-on technical role focused on security testing, penetration testing, control validation, and cybersecurity audit support across IT, OT, cloud, application, container, network, and hybrid environments. The role goes beyond automated scanning to identify real-world vulnerabilities, assess exploitability, and support secure architecture across complex industrial and enterprise environments. Key Responsibilities - Plan and execute manual and automated penetration testing, control validation, and security audits across IT, OT, cloud, and hybrid environments - Test web applications, APIs, mobile apps, thick clients, cloud workloads, Docker containers, Kubernetes clusters, Linux and Windows servers, IIoT platforms, and OT-connected systems - Identify vulnerabilities including business logic flaws, insecure authentication, broken authorization, insecure communications, misconfigured environments, and exposed services - Validate findings through controlled proof-of-concept testing and assess attack paths across application, infrastructure, cloud, container, and OT layers - Perform cybersecurity assessments of OT and industrial environments covering SCADA, DCS, edge gateways, historians, engineering workstations, and IT/OT/cloud segmentation - Review container hardening, Kubernetes configurations, RBAC policies, IAM, secrets exposure, privileged containers, and cloud infrastructure misconfigurations on platforms such as Azure and AWS - Apply recognized methodologies including OWASP, NIST, CIS Controls, MITRE ATT&CK for Enterprise and ICS, and IEC 62443 - Prioritize findings based on exploitability, business impact, operational risk, data sensitivity, and compliance relevance - Translate technical findings into clear risk narratives and deliver actionable remediation guidance with compensating controls where applicable - Support integration of security testing into SDLC and CI/CD pipelines and contribute to DevSecOps automation initiatives - Develop automation scripts, testing playbooks, audit checklists, reporting templates, and security knowledge bases - Stay current with emerging attack techniques, offensive AI, cloud-native attack paths, API abuse patterns, container threats, and adversary tactics Required Qualifications - Proven hands-on experience in penetration testing, cybersecurity assessments, and technical security audits - Strong knowledge of web application, API, network, cloud, container, and OT security testing - Familiarity with MITRE ATT&CK, MITRE ATT&CK for ICS, OWASP, IEC 62443, NIST, and CIS Controls - Experience with Docker, Kubernetes, Azure, AWS, and cloud security posture management - Ability to assess OT environments and understand operational constraints related to safety, uptime, and maintainability - Strong communication skills to convey technical risk to both technical teams and leadership stakeholders - Experience supporting DevSecOps, CI/CD security integration, and security automation tooling Why Join Us Schneider Electric is a global leader in energy management and industrial automation, offering a collaborative environment where cybersecurity professionals can work on complex, high-impact challenges across IT and OT ecosystems. This role provides exposure to cutting-edge technologies and the opportunity to shape cybersecurity assurance practices at a global scale.

- Hands-on penetration testing and cybersecurity audit experience - Web application, API, and network security testing skills - Cloud security experience on Azure or AWS - Docker and Kubernetes security assessment knowledge - OT and ICS environment security testing experience - Knowledge of MITRE ATT&CK, MITRE ATT&CK for ICS, OWASP, IEC 62443, NIST, and CIS Controls - Experience with SDLC security integration and CI/CD pipeline security - Ability to identify vulnerabilities beyond automated scanner results - Strong written and verbal communication skills for risk reporting - Experience with threat-informed testing and adversary simulation techniques

- Opportunity to work on global cybersecurity programs - Exposure to IT, OT, cloud, and industrial security domains - Collaborative and innovation-driven work culture - Career growth within a Fortune 500 organization - Work on cutting-edge technologies including IIoT, cloud-native, and container security