Penetration Tester (f/m/d)

Siemens; Deutschland; Hybrid; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A global medical technology company in Germany is seeking a Penetration Tester to lead security assessments across various environments. Ideal candidates will have a master’s degree in computer science, several years of ethical hacking experience, and strong communication skills. This role offers flexible mobile working and opportunities for professional growth within a dynamic team.

Qualifikationen

• Several years of experience as an ethical hacker/penetration tester.
• Good knowledge of vulnerability scanning and exploitation frameworks.
• Familiarity with OWASP and NIST guidelines.

Aufgaben

• Lead penetration tests and security assessments on various environments.
• Conduct source code analysis of web applications.
• Write comprehensive reports for technical and executive audiences.

Kenntnisse

Penetration testing

Security assessments

Network protocols

Vulnerability scanners

Cloud platforms (AWS, Azure)

Threat modeling

Communication skills

Ausbildung

Master’s degree in computer science

Tools

Port scanners

Exploitation frameworks

Databases (MS SQL, Oracle DB, PostgreSQL, MySQL)

Jobbeschreibung

Do you want to help create the future of healthcare? Siemens Healthineers is dedicated to building the next generation of medical technology. Our name was chosen to honor the people who dedicate their energy and passion to this cause, reflecting our pioneering spirit and long history of engineering in the ever‑evolving healthcare industry.

We offer a flexible and dynamic environment with opportunities to grow personally and professionally. Sounds interesting? Then come and join our global team as Penetration Tester (f/m/d) and become part of our team of cyber security experts in the Healthcare sector.

Location flexibility: Within the scope of this position, it is possible, in consultation with your manager, to work mobile (within Germany) up to an average volume of 60% of the respective working hours. Mobile working from abroad is possible for up to 30 a year under certain conditions and in selected countries.

Your tasks and responsibilities:

• You join a team of offensive security testers and lead penetration tests and security assessments on internal and external networks, Windows and Linux environments, cloud (AWS and Azure) architecture, IoT, healthcare devices, and more.
• You conduct scans, penetration tests and source code analysis of web applications.
• You identify and exploit security vulnerabilities to demonstrate their impact on the environment and business.
• You join authorized hacking engagements that simulate real‑world attack techniques to gain initial access, pivot across systems and networks, and exfiltrate data.
• You write comprehensive and accurate reports for both technical and executive audiences.

Your qualifications and experience:

• You have a master’s degree in computer science (or related field).
• You have several years of experience in the role of an ethical hacker/penetration tester.
• You have good knowledge in the following areas: port scanners, vulnerability scanners, and exploitation frameworks.
• You understand networking and network protocols.
• You are familiar with enumeration techniques.
• You have a basic knowledge of web application manual and automatic testing, including OWASP and NIST guidelines.
• You understand Active Directory, Windows and Linux access controls and administration.
• You are familiar with authentication and authorization models.
• You understand cloud platforms such as Azure and AWS.
• Additionally, you should have a high‑level understanding of threat modeling and risk assessment, web server administration, and penetration testing processes, procedures, legal agreements, and reporting requirements.
• You are familiar with post‑exploitation techniques and have experience working with databases such as MS SQL, Oracle DB, PostgreSQL, and MySQL.
• Certifications such as OSCP, OSCE, AWAE, CISCO CCNA, CISCO CCNP, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB) are nice to have.
• Bug hunting experience, LaTeX and CVE is a plus.
• Experience with SCRUM/KANBAN as well as leading small teams is nice to have.

Your attributes and skills:

• You have excellent written and verbal English communication skills. German language skills are nice to have.
• You have the ability to clearly communicate and present technical topics.
• You have good analytical and problem‑solving skills.
• You have a passion for learning new technologies.
• We win together: You are a team player with the ability to work independently.
• You have advanced interpersonal, verbal and written communication skills.
• You can multitask, manage time effectively and prioritize tasks.
• You are result oriented.
• Your self‑motivation and creativity round up your profile.

Our global team:

Siemens Healthineers is a leading global medical technology company. 73,000 dedicated colleagues in over 70 countries are driven to shape the future of healthcare. An estimated 5 million patients across the globe benefit every day from our innovative technologies and services in the areas of diagnostic and therapeutic imaging, laboratory diagnostics and molecular medicine, as well as digital health and enterprise services.

Our culture:

Our culture embraces different perspectives, open debate, and the will to challenge convention. Change is a constant aspect of our work. We aspire to lead the change in our industry rather than just react to it. That’s why we invite you to take on new challenges, test your ideas, and celebrate success.

As an equal opportunity employer, we welcome applications from individuals with disabilities.

Career information:

Check our Careers Site at https://www.siemens-healthineers.com/de/careers.