Senior Red Teamer/ Pentester Cybersecurity Audit (m/f/d)

Siemens; München; Hybrid; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Mobile work 2-3 days/week

Share matching program

Pension plan

Learning hours 50+

30 leave days

Job summary

Siemens is seeking a seasoned cybersecurity professional to join the Cybersecurity Assurance function, focusing on independent assurance for the Managing Board and Audit Committee. You will conduct assessments, lead red‑team activities, and translate findings into actionable guidance while mentoring colleagues.

The role emphasizes continuous upskilling, global project exposure, and flexible working arrangements, including 2–3 days of mobile work per week.

Qualifications

• Bachelor degree in IT, Computer Science or related field; OSCP/OSWE/OSEP/CRTO/CRTL are plus.
• Scripting and programming skills with Bash, Python, PowerShell, and C++/C#.

Responsibilities

• Conduct and drive Cybersecurity assessments across the Siemens landscape (products, services, IT systems, factories, software centers).
• Plan, perform, and lead ethical hacking activities and design attack scenarios for modern tech.
• Apply red-team methodologies and translate findings into actionable management information.
• Collaborate with Cybersecurity experts across industries to improve solutions and address root causes.
• Conduct independent research on latest Cybersecurity developments and threats impacting Siemens.
• Drive continuous improvement of internal audit processes, tools, and mentor junior team members.

Skills

Bash

Python

PowerShell

C++/C#

Education

Bachelor degree in IT/CS

Tools

OSCP

Job description

Start your cyber career with us! As part of the global Cybersecurity Assurance function, we help Siemens achieve its goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise across a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment that ensures a variety of perspectives and enables big‑picture thinking.

To deliver on our vision of being pioneers in assurance and a talent incubator for Siemens, we offer a unique Grow and Development Model. We believe in lifelong learning and encourage our people toward a mindset in which continuous upskilling and reskilling become a natural part of a career. We invest in expertise by providing continuous career coaching, training, and mentoring, while working with top Siemens business leaders on multiple high‑profile projects worldwide.

What part will you play?

• Conduct and drive Cybersecurity assessments across the entire Siemens landscape, including products, services, IT systems, factories, and software development centers.
• Plan, perform, and lead ethical hacking activities; design attack scenarios for state‑of‑the‑art technologies and highlight important observations to translate technical findings into management information that facilitates effective actions.
• Apply advanced hacking principles and red‑team methodologies, tools and techniques to mimic real‑world threat behaviors faced by Siemens’s digital environment (cloud applications, on‑premise infrastructure, digital products and services).
• Work closely with Cybersecurity experts from multiple industries to improve solutions by tackling root causes and finding innovative responses to modern challenges.
• Conduct independent research on the latest developments in Cybersecurity technologies and threats, and assess how they impact and change Siemens’s environment.
• Drive continuous improvement of internal audit processes, tools, documentation, and coach junior team members.

What You Need To Make Real What Matters

• Strong academic history (Bachelor degree) in IT, Computer Science or related fields; certifications such as OSCP, OSWE, OSEP, CRTO, CRTL etc. are a plus.
• Good scripting and programming skills with experience in Bash, Python, PowerShell, and C++ / C#.
• 7+ years of professional full‑time experience within Siemens or a related industry in penetration testing / red‑teaming, with a proven record of continuous career development.
• Demonstrated affinity for learning about the latest trends in Cybersecurity and keeping up to date in a continuously challenging environment.
• Extensive experience with one or more of the following aspects of penetration testing / red‑teaming: application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Experience in capture‑the‑flag events, bug hunting or vulnerability research (CVEs) is a plus.
• Experience leveraging and integrating AI into day‑to‑day work is considered an advantage.
• Fluent in English; German or other languages are a plus.
• Demonstrated international mindset and openness to international travel and working in a diverse team.

What We Offer

• 2 to 3 days of mobile working per week.
• An environment where everyone can bring their whole self to work and feel belonging.
• 30 leave days and a variety of flexible working models that allow time off for yourself and your family.
• Share‑matching programs to become a shareholder of Siemens AG.
• Pension plan to ensure financial security.
• 50+ learning hours per year for both personal and professional growth.

As an equal‑opportunity employer we are happy to consider applications from individuals with disabilities.