Product Security Engineer Jobs in USA with Visa Sponsorship

INTRODUCTION

You will serve as the dedicated security engineer for our on-premises Data Center Infrastructure Management (DCIM) software. Customers deploy these products within their own data centers as hardened virtual or hardware appliances, or as packaged software on customer-managed Linux hosts.

You will develop deep expertise in these offers and serve as a security subject matter expert throughout the Secure Development Lifecycle. Working closely with engineering teams, product owners, Security Advisors, and other cybersecurity partners, you will identify, assess, prioritize, and help resolve product security risks and vulnerabilities.

ROLE AND RESPONSIBILITIES

Key Responsibilities

• Vulnerability Management: Triage vulnerability reports from scanners such as Snyk, Dependabot, container scanning, and Nessus, as well as internal security teams, external researchers, and testing firms. Assess exploitability and severity using CVSS 3.1/4.0 and drive findings through resolution.

• Security Testing & Disclosure: Coordinate internal and external penetration testing and programs such as CyTRICS. Reproduce and validate findings, verify fixes, and partner with PSIRT on coordinated vulnerability disclosure and customer security notifications.

• Release Security: Lead security reviews for product releases, collect required security evidence and artifacts, and work with the product security organization through release approval.

• Product Security & Customer Assurance: Maintain risk assessments, threat models, security documentation, and customer security information. Support requirements associated with cybersecurity regulations such as the EU Cyber Resilience Act (CRA).

• Secure Development: Review designs and code for vulnerabilities involving authentication, authorization, SSRF, XXE, path traversal, session management, security logging, and secrets management. Guide or implement remediation and develop negative security tests.

• Software Supply Chain & Hardening: Maintain comprehensive SBOMs for released products. Partner with DevOps to ensure effective security scanning within build pipelines, support release/package signing, and define security-hardening requirements for appliances and customer-managed Linux environments.

BASIC QUALIFICATIONS

• 7+ years of experience in software engineering or cybersecurity, including 3+ years in product or application security.

• Ability to review Java/Spring, TypeScript, and Linux configurations to investigate and validate security findings.

• Hands-on experience with SCA and vulnerability scanning tools, CVSS, CWE, and OWASP Top 10.

• Working knowledge of IEC 62443-4-1/4-2, NIST SSDF, or comparable secure development standards.

• Knowledge of applied cryptography, FIPS 140-3 modes, PKI/TLS, LDAP, SAML, OAuth2, container/Kubernetes security, and SBOM formats such as CycloneDX or SPDX.

• Experience triaging externally reported vulnerabilities and supporting coordinated vulnerability disclosure.

• Strong communication skills with developers, product managers, Legal, customers, security researchers, and external testing organizations.

PREFERRED QUALIFICATIONS

• Experience with cybersecurity legislation or regulation, including the EU Cyber Resilience Act.

• Experience managing penetration testing or external security-testing programs such as CyTRICS.

• Ability to implement security fixes in Java/Spring or TypeScript.

• Experience using AI-assisted tools for secure code review or vulnerability discovery.

• Relevant security certification such as GIAC GWEB, OSWE, CKS, or CSSLP.

Bring your cybersecurity expertise to a team that values innovation and excellence — apply today!

COMPENSATION

• Salary Range: USD 117,600 - USD 176,400 per year. This pay range includes base pay and short-term incentives. The compensation range for this full-time position applies to candidates located within the United States. Our pay ranges are determined by reviewing roles of similar responsibility and level. Within the pay range, individual pay is determined by several factors including performance, knowledge, job-related skills, experience, and relevant education or training.

LOCAL BENEFITS

At Schneider, we believe that every employee is a talent who deserves equal opportunities. This means you matter. Every individual needs to feel valued, supported, and treated fairly to do their best work.

Our Total Rewards is our way of saying: “We see you. We value you”. It’s more than just pay and benefits - it’s a meaningful investment in you. It is designed for you to perform, grow, feel safe, and elevate your potential to shine as an impact maker.

Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive: medical (with member reward points), dental, vision, and basic life insurance, Benefit Bucks, flexible work arrangements, paid family leaves, well-being programs, 12 holidays per year, and 15 days of paid time off per year.

Invest and Plan Your Future. We help you plan and invest for the future with competitive pay and programs including base salary, incentives, company share ownership, and 401(k) with match.

Grow Your Skills and Career. We support development through performance discussions, global opportunities, the Schneider Career Hub, and learning platforms like Coursera.

Team Up in the Workplace. We encourage collaboration, recognition, sharing your voice, and an inclusive workplace.

Support Your Community. We make a difference through volunteer leave, programs with the Schneider Electric Foundation, youth education initiatives, and military leave benefits.

If you believe this job posting is not compliant with applicable state pay transparency laws in the U.S., please notify the Company as soon as possible upon discovery by completing this form Job Posting Compliance Form.

EEO STATEMENT

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.