Red Teamer/ Pentester Cybersecurity Audit (m/f/d)

Start your cyber career with us!

As part of the global Cybersecurity Assurance function, we help Siemens achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment that encourages diverse perspectives and big picture thinking.

What part will you play?

• Conduct Cybersecurity assessments across the entire Siemens landscape, including products, services, IT‑systems, factories and software development centers.
• Perform ethical hacking activities and design attack scenarios for state‑of‑the‑art technologies, highlighting observations that translate technical findings into management‑ready information.
• Apply hacking principles and red‑team methodologies, tools and techniques to mimic real‑world threat behaviors faced by Siemens’s digital environment (cloud applications, on‑premise infrastructure, digital products and services).
• Collaborate closely with cybersecurity experts from multiple industries to improve their solutions by addressing root causes and finding innovative solutions to modern challenges.
• Conduct independent research on the latest developments in Cybersecurity technologies and threats, understanding how they impact and change Siemens’s environment.

What You Need To Make Real What Matters

• Strong academic background (Bachelor’s degree) in IT, Computer Science or related field; certifications such as GIAC GPEN, OSCP, CRTP, eJPT, CREST are a plus.
• Good scripting and programming skills in Bash, Python, PowerShell and C++/C#.
• 2+ years of professional, full‑time experience in penetration testing / red teaming, preferably within Siemens or a related industry.
• Demonstrated affinity for learning about the latest cybersecurity trends and staying current in a continuously challenging environment.
• Experience with application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, or similar.
• Experience in capture‑the‑flag events, bug hunting or vulnerability research (CVE) is a plus.
• Experience integrating and leveraging AI in day‑to‑day work is an advantage.
• Fluent in English; German or other languages are a plus.
• International mindset and openness to travel and working in a diverse team.

What We Offer

• 2 to 3 days of mobile working per week, as a future global standard.
• An environment that welcomes everyone to bring their whole self to work and feel a sense of belonging.
• 30 leave days and a variety of flexible working models that allow time off for yourself and your family.
• Share‑matching programs to become a shareholder of Siemens AG.
• Pension plan to ensure financial security.
• 50+ learning hours per year for both personal and professional growth.

As an equal‑opportunity employer we are happy to consider applications from individuals with disabilities.