Project Industrial Cybersecurity Expert (ICSE) (f/m/d)

Siemens Energy, Inc.; Hamburg; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Attractive remuneration package

Job summary

Siemens Energy is seeking a cybersecurity specialist to own IT/OT security for HVDC-related automation and control systems within our Grid Technology teams.

You will develop security concepts, perform risk assessments, and coordinate across engineering, software, network, and commissioning groups with customers and suppliers to document security measures. Fluency in English is essential; German is a plus.

Qualifications

• Degree in Computer Science, Information Technology, Electrical Engineering, Automation Engineering or equivalent.
• Experience in industrial cybersecurity with solid IT/OT knowledge.
• Knowledge of network architectures, firewalls, routing, switching, and segmentation.
• Experience with system hardening, vulnerability management, and risk assessments; basic pen testing is a plus.
• Knowledge of IEC 62443, NIS2, Cyber Resilience Act; familiarity with NERC CIP/BDEW is advantageous.
• Very good English; German is a plus; able to work in demanding, multi-disciplinary projects.

Responsibilities

• Take technical ownership of cybersecurity topics within our projects and analyze customer requirements to derive specific technical measures for IT and OT systems.
• Develop and coordinate project-specific security concepts and assess architectures from a cybersecurity perspective.
• Execute risk and vulnerability assessments, evaluate vulnerabilities, and define mitigation measures.
• Define, assess, and implement hardening measures for automation systems, network components, servers, and workstations, including security for firewalls and switches.
• Support vulnerability scans, security testing, and penetration testing activities, including during Factory Acceptance Tests.
• Coordinate technical solutions with engineering, software, network, automation teams, customers and suppliers; document all security measures.

Skills

Industrial cybersecurity

IT/OT knowledge

Networking fundamentals

Penetration basics

English proficiency

Education

Bachelor's degree in CS/IT/EE/Automation

Job description

A Snapshot of Your Day

A Customer has reported one of his redundant Servers for the HMI of his HVDC System is sporadically rebooting. Together with Experts you are analyzing the root cause of this Issue and based on this you recommend a change of the configuration of the Network. In addition to day-to-day business, your focus will be on developing new security concepts, revising existing processes and advising external and internal customers.

A Snapshot of Your Day

A Customer has reported one of his redundant Servers for the HMI of his HVDC System is sporadically rebooting. Together with Experts you are analyzing the root cause of this Issue and based on this you recommend a change of the configuration of the Network. In addition to day-to-day business, your focus will be on developing new security concepts, revising existing processes and advising external and internal customers.

How You’ll Make An Impact

• Take technical ownership of cybersecurity topics within our projects and analyze customer requirements to derive specific technical measures for IT and OT systems
• Develop and coordinate project-specific security concepts and assess system and network architectures from a cybersecurity perspective
• Execute risk and vulnerability assessments, technically evaluate identified vulnerabilities, and define appropriate mitigation measures
• Define, assess, and implement hardening measures for automation systems, network components, servers, and workstations, including security requirements for firewalls and switches
• Support vulnerability scans, security testing, and penetration testing activities, including during Factory Acceptance Tests
• Coordinate technical solutions with engineering, software, network, and automation teams as well as customers and suppliers, support commissioning teams, and document all implemented security measures

What You Bring

• Degree in Computer Science, Information Technology, Electrical Engineering, Automation Engineering, or a comparable technical qualification
• Experience in cybersecurity for industrial systems with a solid understanding of IT and OT infrastructures and industrial automation/control systems
• Knowledge of network architectures, firewalls, routing, switching, and network segmentation, as well as typical server and client systems in industrial environments
• Experience with system hardening, vulnerability assessments and management, and Threat and Risk Assessments; basic penetration testing experience is a plus
• Knowledge of relevant cybersecurity standards and regulatory requirements, in particular IEC 62443, NIS2, and the Cyber Resilience Act (CRA); familiarity with NERC CIP and BDEW is an advantage
• Very good English language skills for collaboration with projects, customers, and international partners; German is a plus. Proven ability to work in technically demanding project environments, independently analyzing requirements and developing solutions across different engineering disciplines

About The Team

Our Grid Technology division enables a reliable, sustainable, and digital grid. The power grid is the backbone of the energy transition. Siemens Energy offers a leading portfolio and solutions in HVDC transmission, grid stabilization and storage, high voltage switchgears and transformers, and digital grid technology.

Who is Siemens Energy?

At Siemens Energy, we are more than just an energy technology company. With ~100.000 dedicated employees in more than 90 countries, we develop the energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world’s electricity generation. Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation. Find out how you can make a difference at Siemens Energy:

Our Commitment to Diversity

Lucky for us, we are not all the same. Through diversity we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.

Rewards/Benefits

• In addition to an attractive remuneration package in line with the market, you can expect an attractive employer-financed company pension scheme
• We also offer the opportunity to become a Siemens Energy shareholder
• We offer our employees the opportunity to work flexibly and remotely, and our inspiring offices provide space for collaboration and creativity
• The professional and personal development of our employees is very important to us. We provide them with the opportunities to learn and develop in a self-determined way, various attractive programs and learning materials are available for this purpose
• In relation to the "compatibility of family and work", we have a wide range of offers, e.g. flexible working time models, childcare places at many locations, the possibility of trial part-time work or even a sabbatical

We value equal opportunities and welcome applications from people with disabilities.