Cloud Security Engineer SaaS Applications

Siemens; Lyon; Sur place; EUR 35 000 - 66 000; Plein temps

Avantages offerts par ce poste

Health and wellness benefits

Inclusive, diverse workplace

Résumé du poste

Siemens Software, a leader in digital industries, is hiring a Cloud Security Engineer for the Simcenter X SaaS solution. You will secure cloud-native SaaS apps hosted on AWS, contribute to overall security posture, and work with an international SecOps team.

You will model threats, analyze vulnerabilities, and support incident response while collaborating across multi-cultural teams to strengthen design and implementation security.

Qualifications

• Engineering degree or equivalent in a relevant field.
• Strong cybersecurity experience, especially in cloud-native/AWS environments.
• Proven ability to secure cloud platforms and design secure architectures.

Responsabilités

• Perform Threat Modeling (STRIDE) for cloud-native architectures and SaaS apps.
• Analyze vulnerabilities from automated security tools and third parties.
• Support incident response and root cause analysis with cross-team coordination.
• Report on SaaS security posture to stakeholders and drive remediation.

Connaissances

Cybersecurity engineering

Cloud security (AWS)

Threat modeling

Scripting (Python/PowerShell/Bash)

IaC (Terraform/CloudFormation)

Regulatory knowledge (GDPR/ISO27001/Ni

Formation

Engineering degree or equivalent

Outils

Terraform

CloudFormation

SAST/DAST tooling

Description du poste

Job Description:

Hello World, We are hiring!

We empower our people to stay resilient and relevant in a constantly changing world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future.

Does that sound like you? Then it seems like you’d make a great addition to our vibrant team.

Siemens Software, a business unit of the Siemens Digital Industries, is a leading global provider of software solutions to drive the digital transformation of industry, creating new opportunities for manufacturers to realize innovation.

About the role

Do you wish to contribute to the success of our cutting-edge SaaS software solutions through your cybersecurity skills? The Simcenter X Security team is expanding, and were looking for a dedicated Cloud Security Engineer to ensure the highest quality in terms of security and compliance for our Simcenter X SaaS solution, primarily hosted on AWS. You will also play a key role in the overall security posture of the broader Simcenter X product range.

The SaaS Security Operations Team is crucial to safeguarding the security and operational efficiency of our SaaS organization. We are seeking a dynamic professional to join our international SecOps team as a Cloud Security Engineer. You will be one of the "guardians" of our software value, playing a meaningful role in identifying and addressing potential security threats through advanced threat modeling and conducting thorough penetration testing across our cloud-native systems, web applications, and APIs. This role will be pivotal in proactively safeguarding our cloud perimeter and continuously enhancing our security posture.

Proactive in your day-to-day work and engaged with multiple teams, you are a strong team player and creative problem solver who can work with multi-cultural, dispersed technical teams and contribute to the success of our solutions by:

• Performing Threat Modeling using frameworks like STRIDE to identify, prioritize, and mitigate potential security risks within our cloud architecture and SaaS applications for new implementations and safeguard Security By Design principles.
• Analyzing vulnerabilities reported from automated security tools (e.g., SAST, DAST, cloud security posture management tools) or third parties to assess their exploitability and potential impact on our cloud infrastructure and applications.
• Supporting the resolution of security incidents, including Root Cause Analysis (RCA), containment, and recovery, in collaboration with the wider security organization and incident response best practices.

Your qualifications

We would like to hear from you if you have an engineering degree or equivalent, and have successful experience in the field of cybersecurity, particularly within AWS cloud or cloud-native environments:

You have proven experience securing major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or cloud-native environments, with a solid understanding of cloud architecture, core services, shared responsibility models and zero trust architecture.

You have a strong background in performing STRIDE or other threat modeling methodologies, ideally applied to cloud-native architectures, microservices, APIs, and distributed SaaS environments. You can identify trust boundaries, data flows, attack paths, and abuse cases, then translate findings into prioritized security requirements, mitigation actions, and practical guidance for engineering teams throughout the design and implementation lifecycle.

You are proficient in scripting languages such as Python, PowerShell, or Bash, and have experience using Infrastructure as Code tools such as Terraform or CloudFormation to automate security tasks, scans, and policy enforcement across cloud environments.

You have a strong understanding of cloud security services and controls, including network security practices such as securing VPCs, segmentation, and virtual firewalls; Identity and Access Management (IAM) for managing user permissions and resource access; and data encryption to protect information at rest and in transit across cloud workloads.

You are familiar with common web applications and API security vulnerabilities, including OWASP Top 10 and API Security Top 10, and their exploitation and mitigation, while also bringing knowledge of regulatory frameworks such as GDPR, ISO 27001, NIS2 and CRA. You have experience conducting risk assessments, maintaining security policies, and using Cloud Security Posture Management (CSPM) practices and tools to continuously improve cloud security compliance and visibility.

You can understand complex products, solutions, and issues within a cloud context and are able to report consistently, concisely, and effectively on our SaaS Security posture to the various stakeholders, allowing for management prioritization, investment, and reporting.

Thanks to your enthusiasm, excellent English language skills, and autonomy, you build strong relationships with your interlocutors and easily integrate into a technical expert role in an international and multicultural context.

Nice-to-have certifications

• Certified Cloud Security Professional (CCSP)
• CompTIA Security+ or CompTIA Cloud+
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer

Working at Siemens Software

A collection of over 377,000 minds building the future one day at a time in over 200 countries. Were dedicated to equality, and we welcome applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit, and business need. Bring your curiosity and creativity and help us shape tomorrow.

Siemens is not the same manufacturing company as in the past. We are helping our customers get to tomorrow faster through innovation and digitalization and are transforming alongside them. We are a modern, forward-looking software company, with the opportunities of a large corporation, where your opportunities are endless. The role you apply for today is only the first step in your Siemens journey.

Compensation & Benefits

The primary locations for this opportunity are France and Romania. The applicable salary ranges for these locations are:

RON 186,000 - RON 353,300

This role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidates job-related skills, experience, and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link: https://jobs.sw.siemens.com/benefits/

This position may also be posted in additional locations beyond those specified above. For such locations, the applicable salary ranges and benefits will be disclosed by the Talent Acquisition Partner at the time of initial contact, in accordance with local legal requirements.

Diversity & Inclusion

We value equal opportunities and welcome applications from all candidates. At Siemens, we believe people whove had real experiences dealing with being different will excel as leaders. Lets foster a culture of creativity and innovation. We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Siemens. Making real what matters

If you want to make a difference – make it with us!

#DISWSIM