Principal DevSecOps Engineer

About the Eco Struxure Building Data Platform

The Eco Struxure Building Data Platform is Schneider Electric's independent data layer for collecting, contextualizing, storing, and analyzing building operational data at scale.

The platform ingests and processes real-time telemetry from connected building systems using cloud-native technologies hosted in Microsoft Azure. It provides the foundation for analytics, digital services, applications, and customer integrations across Schneider Electric's building ecosystem.

We are seeking a Principal Dev Sec Ops  Engineer to own the implementation, operation, and continuous improvement of the security posture of the Eco Struxure Building Data Platform.

This role serves as the hands-on security leader embedded within the engineering organization. The successful candidate will lead security tooling, security automation, vulnerability remediation coordination, software supply chain security, Secure SDLC implementation, release security readiness, and cloud security enablement across the platform.

The Principal Dev Sec Ops  Engineer is accountable for the implementation and operational execution of product security controls.

This role works closely with:

• Security Advisor
• Principal Systems Engineer
• Engineering Technical Leads
• Principal Cloud Operations & Infrastructure Engineer
• Product Owners
• Schneider Electric Product Security
• 24x7 Operation Support Team

The Security Advisor remains responsible for independent governance, risk assessment, policy interpretation, CPCERT alignment, risk acceptance guidance, and security oversight.

In this role, you are responsible for implementation, execution, automation, evidence generation, and remediation coordination.

• Own the operational security posture of the Eco Struxure Building Data Platform.
• Establish and maintain security baselines across applications, cloud services, containers, APIs, CI/CD systems, and supporting platform components.
• Continuously assess security maturity and identify opportunities for improvement.
• Implement security controls and automation that reduce platform risk.
• Report operational security health, remediation status, and security trends.

• Operate vulnerability management activities in accordance with Schneider Electric CPCERT processes and security requirements.
• Perform technical triage of findings from Sonar Qube, Black Duck Binary Analysis (BDBA), penetration tests, container security scans, dependency analysis tools, and cloud security assessments.
• Assess technical applicability of vulnerabilities and identify remediation approaches for affected platform components.
• Partner with the Security Advisor on vulnerability prioritization, risk evaluation, exception reviews, and remediation timelines.
• Lead remediation planning and coordinate execution with Technical Leads and engineering teams.
• Track remediation progress, closure status, security debt metrics, and vulnerability trends.
• Support vulnerability reporting and evidence requirements for security reviews, audits, and compliance activities.

• Partner with the Security Advisor to implement Secure SDLC requirements across the Eco Struxure Building Data Platform.
• Embed automated security controls and validation activities into Git Hub Actions workflows and deployment pipelines.
• Implement approved security gates and release readiness checks within software delivery processes.
• Generate and maintain security evidence required for product release reviews and compliance activities.
• Support developer enablement through practical guidance, tooling, templates, and automation that promote secure engineering practices.
• Improve security…