Experienced Associate - Cybersecurity Audit (m/f/d) - RED Team-DISW

Overview

Start your cyber career with us! As part of the global Cybersecurity Assurance function, we help Siemens to achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment which ensures a variety of perspectives and enables big picture thinking.

To deliver on our vision of being pioneers in assurance and a talent incubator for Siemens, we offer a unique Grow and Development Model. We believe in lifelong learning and encourage our people towards a mindset where continuous upskilling and reskilling becomes a natural part of our career. We invest in our expertise and provide continuous career coaching, trainings and mentoring, while working with top Siemens business leaders on multiple high-profile projects around the world. Our Cybersecurity team provides core assurance over the cybersecurity health of the company, including IT and OT infrastructures, product security, software development and cloud environments. We are looking for people with a great skillset, an international mindset and new ideas who understand Siemens businesses and how Cybersecurity helps enable and increase market value.

To discover more about the global Siemens assurance function click here .

What part will you play?

• As a valuable member of the assurance team you will be responsible for conducting Cybersecurity assessments across the entire Siemens landscape, including products, services, IT-systems, factories, and software development centers. You will perform ethical hacking activities, design attack scenarios for state-of-the-art technologies and translate technical findings into management information so that actions can be taken.
• Apply hacking principles and red team methodologies, tools and techniques to mimic real-world threat behaviors faced by the Siemens digital environment, e.g. cloud applications, on-premise infrastructure, digital products and services.
• You will work closely with cybersecurity experts from multiple industries to improve their solutions by tackling the root cause of issues and finding innovative solutions to modern challenges.
• You independently conduct research on the latest developments in cybersecurity technologies and threats and understand how this is impacting and changing the Siemens environment.

What You Need To Make Real What Matters

• Strong academic history (Master degree) in IT, Computer Science or related fields; certifications such as GIAC GPEN, OSCP, OSWE, CRTP, eJPT, CREST, etc. are a plus.
• Good scripting and programming skills and experience with languages such as Bash, Python, Powershell, and C++ / C#.
• Solid background and years of professional experience within Siemens or a related industry in penetration testing with a proven record of continuous career development.
• Demonstrated affinity to learn about the latest trends in cybersecurity and keep up to date in a continuously challenging environment.
• Experience with one or more aspects of penetration testing / red teaming: application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Demonstrated experience in capture the flag (CTFs) events, bug hunting or vulnerability research (CVEs) is a plus.
• You demonstrate an international mindset and are open to travelling and working in a diverse team.
• You have a great attitude, curiosity, and willingness to learn.

Working at Siemens Digital Industries Software

Why us?

Working at Siemens Digital Industries Software means flexibility — choosing between working at home and the office at other times is the norm here. We offer great benefits and rewards, as you’d expect from a world leader in industrial software.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Siemens Software. Transform the Everyday.