Experienced Associate / Pentester (Red Team) (m / f / d) - Cybersecurity Audit - Inklusiver Job

Siemens AG; München; Vor Ort; EUR 70.000 - 95.000; Vollzeit

Zusammenfassung

Siemens AG seeks a skilled professional for their Cybersecurity and Applications Practice. As a key member of the assurance team, you will conduct cybersecurity assessments, perform ethical hacking, and work closely with experts to enhance Siemens' cybersecurity posture. Ideal candidates will have a strong academic background in IT or Computer Science along with significant experience in penetration testing.

Leistungen

2 to 3 days of mobile working per week

30 leave days

50+ learning hours per year

Share matching programs

Qualifikationen

• 5+ years in penetration testing.
• Experience in application/software security.
• Familiar with cybersecurity trends.

Aufgaben

• Conduct Cybersecurity assessments across Siemens.
• Design attack scenarios and perform ethical hacking.
• Research latest developments in cybersecurity.

Kenntnisse

Scripting skills

Programming (Bash, Python, C++, C#)

Cybersecurity knowledge

Penetration testing

Red teaming

Continuous learning

Ausbildung

Master's degree in IT, Computer Science or related fields

Certifications (GIAC GPEN, OSCP, OSWE, etc.)

Jobbeschreibung

Controlling and Finance Assurance (CF A) helps Siemens to achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change with improved financial results. We offer a vibrant, international, and inclusive environment which ensures a variety of perspectives and enables big picture thinking.

CF A is a unique talent incubator inside Siemens. We offer continuous career coaching and mentoring throughout the program, all whilst working with top Siemens business leaders on multiple high-profile projects around the world. This is your chance to build your network within the company, develop your operational experience and prepare yourself for a leading role.

The Cybersecurity and Applications Practice provides core assurance over the cybersecurity health of the company which includes IT / OT and R&D infrastructure, product security, and cloud applications. We are on the lookout for people with a great skillset, an international mindset and new ideas who understand Siemens businesses and how Cybersecurity helps enable and increase market value. Are you one of them?

To discover more about CF A have a look at Controlling and Finance Assurance - Siemens Global

What part will you play?

• As valuable member of the assurance team you will be responsible for conducting Cybersecurity assessments across the entire Siemens landscape, including products, services, IT-systems, factories, and software development centers. During this process you will perform ethical hacking activities, design attack scenarios for state-of-the-art technologies and highlight important observations totranslate technical findings into management information so that they can take effective actions.
• Apply hacking principles and red team methodologies, tools and techniques to mimic real-world threat behaviors faced by the Siemens's digital environment, e.g. cloud applications, on-premise infrastructure, digital products and services.
• You work closely with cybersecurity experts from multiple industries to improve their solutions by tackling the root cause of the issues and find innovative solutions to modern challenges.
• You independently conduct research on latest developments in cybersecurity technologies and threats and understand how this is impacting and changing the Siemens' environment.

What you need to make real what matters.

• Strong academic history (Master degree) in IT, Computer Science or other related fields; certifications such as GIAC GPEN, OSCP, OSWE, CRTP, eJPT, CREST, etc. are a plus.
• Good scripting and programming skills and experience with languages such as Bash, Python, Powershell, and C++ / C#.
• At least 5+ years of professional experience within Siemens or a related industry in penetration testing with a proven record of continuous career development.
• Demonstrated affinity to learn about the latest trends in cybersecurity and keep up to date in a continuously challenging environment.
• You have experience with one or more of the following aspects of penetration testing / red teaming : application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Demonstrated experience in capture the flag (CTFs) events, bug hunting or vulnerability research (CVEs) is a plus.
• You demonstrate an international mindset and are open to travelling and working in a diverse team.
• You have a great attitude, curiosity, and willingness to learn.

While commitment to our job improves performance, growth happens when we stretch beyond our comfort zone. CF A offers ample of opportunities to seek the challenge :

Caring for the world around us is a crucial part of our working culture at CF A for over a decade.

Everyone at CF A has the possibility to actively engage in our global CSR community and make an impact with our socially and environmentally motived CSR projects.

What we offer.

• 2 to 3 days of mobile working per week as a future global standard
• An environment where everyone can bring their whole self to work and feel a sense of belonging
• 30 leave days and a variety of flexible working models that allow time off for yourself and your family
• Share matching programs to become a shareholder of Siemens AG
• 50+ learning hours per year for both personal and professional growth

Click here if you wish to find out more about Siemens before applying.

As an equal-opportunity employer we are happy to consider applications from individuals with disabilities .