Red Teamer / Pentester - Cybersecurity Audit (m/f/d) - DISW

Siemens Digital Industries Software; München; Hybrid; EUR 61.400 - 98.400; Vollzeit

Benefits dieser Stelle

Mobile working 2–3 days/week

Inclusive culture and belonging

30 leave days

Share matching

Pension plan

Learning hours (50+)

Zusammenfassung

Siemens Digital Industries Software is seeking an experienced cybersecurity assurance professional to conduct assessments across the Siemens landscape. You will perform ethical hacking, design attack scenarios, and translate findings into management reports to drive effective action.

You will apply red-team methodologies across cloud, on-premise, and product environments, closely collaborating with cybersecurity experts to deliver innovative solutions and stay ahead of evolving threats.

Qualifikationen

• Bachelor degree in IT, CS or related field is required.
• Certifications such as GIAC GPEN, OSCP, CRTP, eJPT, CREST are a plus.
• Strong scripting and programming skills in Bash, Python, PowerShell, and C/C#/C++.
• At least 2+ years of professional penetration testing/red-teaming experience.
• Interest in latest cybersecurity trends and threat landscapes.

Aufgaben

• Conduct cybersecurity assessments across Siemens landscape including products, services, IT systems, and software development centers.
• Perform ethical hacking activities and design attack scenarios for modern technologies.
• Translate technical observations into actionable management information for decision makers.
• Mpadto apply red-team methodologies to mimic real-world threats in cloud, on-premises, and digital products.

Kenntnisse

Bash

Python

PowerShell

C++/C#

Penetration testing

Red-team

Ausbildung

Bachelor degree in IT/CS

GIAC GPEN/OSCP/CREST certs

Tools

EDR

Active Directory

Automation tooling

Jobbeschreibung

Start your cyber career with us! As part of the global Cybersecurity Assurance function, we help Siemens to achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment which ensures a variety of perspectives and enables big picture thinking.

To deliver on our vision of being pioneers in assurance and a talent incubator for Siemens, we offer a unique Grow and Development Model. We believe in the concept of lifelong learning and therefore encourage our people towards a mindset where continuous up‑skilling and reskilling becomes a natural part of our career. We invest in our expertise and therefore provide continuous career coaching, trainings and mentoring, all whilst working with top Siemens business leaders on multiple high‑profile projects around the world.

Our Cybersecurity team provides core assurance over the cybersecurity health of the company which includes IT infrastructures, product security, software development and cloud environments. We are on the lookout for people with a great skillset, an international mindset and new ideas who understand Siemens businesses and how Cybersecurity helps enable and increase market value. Are you one of them?

What part will you play?

• As a valuable member of the assurance team you will be responsible for conducting Cybersecurity assessments across the entire Siemens landscape, including products, services, IT‑systems, and software development centers. During this process you will perform ethical hacking activities, design attack scenarios for state‑of‑the‑art technologies and highlight important observations to translate technical findings into management information so that they can take effective actions.
• Apply hacking principles and red‑team methodologies, tools and techniques to mimic real‑world threat behaviours faced by the Siemens digital environment, e.g. cloud applications, on‑premise infrastructure, digital products and services.
• You work closely with cybersecurity experts from multiple industries to improve their solutions by tackling the root cause of the issues and find innovative solutions to modern challenges.
• You independently conduct research on latest developments in cybersecurity technologies and threats and understand how this is impacting and changing the Siemens’ environment.

Qualifications

• Strong academic history (Bachelor degree) in IT, Computer Science or other related fields; certifications such as GIAC GPEN, OSCP, CRTP, eJPT, CREST, etc. are a plus.
• Good scripting and programming skills and experience with languages such as Bash, Python, Powershell, and C++ / C#.
• At least 2+ years of professional full‑time working experience within Siemens or a related industry in penetration testing / red‑teaming with a proven record of continuous career development.
• Demonstrated affinity to learn about the latest trends in cybersecurity and keep up to date in a continuously challenging environment.
• You have first experience with one or more of the following aspects of penetration testing / red‑teaming: application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Demonstrated first experience in capture the flag (CTFs) events, bug hunting or vulnerability research (CVEs) is a plus.
• Experience with leveraging and integrating AI into day‑to‑day work is considered an advantage.
• Fluent in English. German or other languages are a plus.
• You demonstrate an international mindset and are open to international travel, and working in a diverse team.

What We Offer

• 2 to 3 days of mobile working per week as a future global standard.
• An environment where everyone can bring their whole self to work and feel a sense of belonging.
• 30 leave days and a variety of flexible working models that allow time off for yourself and your family (for Germany).
• Share matching programs to become a shareholder of Siemens AG.
• Pension plan to ensure financial security.
• 50+ learning hours per year for both personal and professional growth.

We are an equal‑opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

The salary range for this position is 61,400 EUR to 98,400 EUR and this role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidate’s job‑related skills, experience and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link: https://jobs.sw.siemens.com/benefits/