Cybersecurity Specialist for Vulnerability Management (f/m/d)

Siemens Energy Global GmbH & Co. KG; Hamburg; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Benefits dieser Stelle

Attractive and competitive compensation package

Employer-funded retirement plan

Opportunity to become a shareholder

Flexible working options

Access to professional development programs

Zusammenfassung

A leading energy technology company in Hamburg is seeking a Cybersecurity Specialist for Vulnerability Management. This role involves enhancing the cybersecurity posture of wind power plants by driving vulnerability management processes, collaborating with cross-functional teams, and reporting security findings to senior management. The ideal candidate has a relevant university degree, profound cybersecurity experience ideally in the energy sector, and is fluent in English. The position offers competitive compensation and flexible working options.

Qualifikationen

• Profound experience in cybersecurity and vulnerability management, preferably in the energy sector.
• Deep understanding of common security vulnerabilities and exploitation techniques.
• Fluency in English with excellent communication skills.

Aufgaben

• Drive and improve vulnerability management processes.
• Analyze vulnerabilities by severity and exploitability.
• Collaborate with teams to implement remediation strategies.
• Report on findings and security posture to management.

Kenntnisse

Cybersecurity expertise

Vulnerability management

Communication skills

Knowledge of cybersecurity standards

Risk assessment

Ausbildung

University degree in Cybersecurity, IT, or Computer Science

Tools

Nessus

Qualys

Burp Suite

OWASP ZAP

BlackDuck

Snyk

SonarQube

Jobbeschreibung

Cybersecurity Specialist for Vulnerability Management (f/m/d)

Location: Hamburg

Snapshot of Your Day

Our Industrial Cybersecurity department is seeking a highly qualified and driven industrial cybersecurity specialist to support vulnerability management efforts within the Product and Solutions domain.

As an Industrial Cybersecurity Specialist, you will play a critical role in ensuring the security posture of wind power plants by proactively identifying and supporting the remediation of potential security risks.

You will become part of the Industrial Cybersecurity Technical Competence Center (TCC), a diverse and international team of experienced cybersecurity professionals supporting the business and development teams in securing systems by default across Product and Solutions, Manufacturing IT and Business managed IT.

In this role you will play a key role in supporting and enhancing the vulnerability management process to strengthen the security posture of the company’s products and solutions.

How You’ll Make an Impact

• Driving and continuously improving the vulnerability management process.
• Staying up to date with emerging security threats, vulnerabilities, and industry best practices to continuously improve our vulnerability management program.
• Assessing identified vulnerabilities by analyzing their severity, exploitability, and relevance to our company’s products and solutions.
• Collaborating with cross‑functional teams to define and implement effective remediation strategies and action plans.
• Supporting the development of mitigation plans to address vulnerabilities by applying patches, implementing alternative safeguards, or facilitating risk acceptance decisions.
• Advising stakeholders on security best practices and providing recommendations for effective vulnerability treatment.
• Reporting on vulnerability findings, remediation efforts, and overall security posture to senior management and relevant stakeholders.

What You Bring

• A university degree in Cybersecurity, Information Technology, Computer Science, or a comparable field.
• Profound experience in cybersecurity, product security or OT security, preferably in the energy sector. Experience with widely recognized OT cybersecurity standards, including ISA/IEC 62443, NIST SP 800‑82, and ISO 27001 is preferred. Experience with regulatory compliance requirements specific to OT environments (e.g., NIS2, NERC CIP, EU Cyber Resilience Act) is highly welcome.
• Deep expertise in vulnerability management, including conducting assessments, performing security testing, and developing remediation strategies.
• Deep understanding of common security vulnerabilities, attack vectors, and exploitation techniques.
• Hands‑on experience with industry‑standard vulnerability scanning techniques and tools (e.g., Nessus, Qualys, Burp Suite, OWASP ZAP).
• Familiarity with industry‑standard SCA and SAST techniques and tools (BlackDuck, Snyk, SonarQube). Knowledge and experience with SCADA and Industrial Control Systems is preferred.
• Fluency in English and excellent communication and interpersonal skills, with the ability to collaborate across functions and convey technical concepts to non‑technical stakeholders.
• Relevant cybersecurity certifications such as CEH, OSCP, PNPT, GICSP, ISA/IEC 62443 Cybersecurity Expert are highly welcome.

About the Team

Our Global Functions are essential in driving the company’s strategic initiatives and ensuring operational excellence across various departments, business areas, and regions. These roles support our vision to become the most valued energy technology company in the world. As part of our team, you contribute to our vision by shaping the global energy transition, partnering with our internal and external stakeholders, and conducting business responsibly and in compliance with legal requirements and regulations.

Who is Siemens Energy?

At Siemens Energy, we are more than just an energy technology company. With ~100.000 dedicated employees in more than 90 countries, we develop the energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world’s electricity generation.

Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150‑year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.

Lucky for us, we are not all the same. Through diversity we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.

Benefits

• In addition to an attractive and competitive compensation package, you can expect a generous employer‑funded retirement plan.
• We also offer the opportunity to become a shareholder in Siemens Energy at very favorable employee rates.
• Under our motto #BetterTogether, we provide our employees with the flexibility to work remotely or in the office. Our workspaces are designed to inspire collaboration and creativity, ensuring a fulfilling work environment.
• We are deeply committed to the professional and personal development of our employees.
• You will have the opportunity to learn and grow at your own pace, with access to a variety of appealing programs and initiatives.
• To support work‑life balance, we offer a diverse range of options, including flexible working hours, childcare facilities at many locations, opportunities for part‑time work, and even sabbaticals.

We value equal opportunities and welcome applications from people with disabilities.