Cybersecurity Architect

Siemens Healthineers AG; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Siemens Healthineers AG is seeking a senior cybersecurity architect to lead product security development plans, define architecture plans, and conduct TRA for regulated medical products. You will collaborate with engineering to ensure secure designs, maintain audit-ready documentation, and drive risk-informed decisions across teams.

The role emphasizes leadership in cybersecurity strategy, regulatory alignment (FDA RMF/ATO-like processes), and continuous improvement of security practices within

Qualifications

• : Lead cybersecurity architecture and TRA activities within product teams.
• : Define and maintain cybersecurity requirements and architecture plans.
• : Collaborate with engineering to ensure security controls meet regulatory and product needs.
• : Drive risk-based decisions and ensure audit-ready documentation.

Responsibilities

• : Lead cybersecurity planning activities by developing PSDP and establishing strategies.
• : Define and maintain product cybersecurity requirements and TRA outputs.
• : Collaborate with engineering to evaluate designs against requirements and ensure controls.
• : Ensure traceability from architecture through design and verification for regulatory docs.
• : Promote adoption of cybersecurity architecture methodologies and best practices.
• : Balance risk, regulatory expectations, and business value in remediation decisions.

Skills

Cybersecurity architecture

Threat & Risk Assessments

Secure design principles

Attack surface analysis

Security design reviews

Regulatory submissions

Leadership

Stakeholder management

Communication

Mentoring teams

Education

Bachelor's or Master's in CS/Cybersecurity/Software Eng

Job description

• You will lead cybersecurity planning activities by developing Product Security Development Plans (PSDP), determining project cybersecurity classifications, and establishing cybersecurity engineering strategies that align with regulatory, organizational, and product-specific requirements.
• You will define and maintain product cybersecurity requirements by identifying applicable regulatory, industry, and organizational requirements; determining their applicability; developing Product Security Architecture Plans; conducting Threat and Risk Assessments (TRA); and producing technical cybersecurity artifacts supporting regulatory and government certification activities, including FDA cybersecurity guidance and DoD RMF/ATO.
• You will collaborate with engineering teams to evaluate solution designs against cybersecurity requirements, define cybersecurity acceptance criteria, and ensure security controls are implemented in a practical, compliant, and sustainable manner.
• You will own the quality, traceability, and audit readiness of cybersecurity architecture deliverables by ensuring cybersecurity requirements are traceable from cybersecurity architecture through design, implementation, verification, residual risk rationale, and supporting regulatory documentation.
• You will partner with engineering, quality, regulatory, verification, and product management teams to facilitate risk-informed cybersecurity decisions, ensuring remediation efforts are prioritized based on actual risk while avoiding unnecessary implementation of security controls that do not provide meaningful product or customer value.
• You will collaborate with peers to drive the adoption and continuous improvement of cybersecurity architecture methodologies, templates, tools, and engineering best practices.

Job Requirements

• You will lead cybersecurity planning activities by developing Product Security Development Plans (PSDP), determining project cybersecurity classifications, and establishing cybersecurity engineering strategies that align with regulatory, organizational, and product-specific requirements.
• You will define and maintain product cybersecurity requirements by identifying applicable regulatory, industry, and organizational requirements; determining their applicability; developing Product Security Architecture Plans; conducting Threat and Risk Assessments (TRA); and producing technical cybersecurity artifacts supporting regulatory and government certification activities, including FDA cybersecurity guidance and DoD RMF/ATO.
• You will collaborate with engineering teams to evaluate solution designs against cybersecurity requirements, define cybersecurity acceptance criteria, and ensure security controls are implemented in a practical, compliant, and sustainable manner.
• You will own the quality, traceability, and audit readiness of cybersecurity architecture deliverables by ensuring cybersecurity requirements are traceable from cybersecurity architecture through design, implementation, verification, residual risk rationale, and supporting regulatory documentation.
• You will partner with engineering, quality, regulatory, verification, and product management teams to facilitate risk-informed cybersecurity decisions, ensuring remediation efforts are prioritized based on actual risk while avoiding unnecessary implementation of security controls that do not provide meaningful product or customer value.
• You will collaborate with peers to drive the adoption and continuous improvement of cybersecurity architecture methodologies, templates, tools, and engineering best practices.

Your Expertise

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, Computer Engineering, or a related technical discipline, or equivalent experience. Minimum 10+ years of experience in software engineering, product cybersecurity, or security architecture, including 3+ years leading technical teams or cybersecurity initiatives.
• Demonstrated expertise in product cybersecurity architecture, cybersecurity architecture planning, Threat and Risk Assessments (TRA), threat modeling, security requirements definition and disposition, secure design principles, attack surface analysis, and security design reviews for complex software-enabled products.
• Strong knowledge of secure software development, cybersecurity risk management, vulnerability assessment, penetration testing, security control selection, security verification, and risk-based engineering decision making, with the ability to translate technical findings into practical engineering solutions.
• Experience supporting regulated product development, including cybersecurity architecture plans, security requirements definition, requirements applicability and disposition, cybersecurity design reviews, security acceptance criteria, design traceability, residual risk documentation, and cybersecurity deliverables supporting regulatory submissions and customer communications.
• Experience developing technical cybersecurity documentation supporting regulatory and government certification frameworks, such as FDA cybersecurity guidance, NIST Risk Management Framework (RMF), DoD Authorization to Operate (ATO), or equivalent security assurance programs, is highly desirable.
• Proven ability to collaborate across engineering organizations, facilitate cybersecurity risk discussions, and balance cybersecurity, product architecture, operational constraints, regulatory expectations, and business objectives to enable informed engineering decisions.
• Strong leadership, communication, and stakeholder management skills, with a track record of mentoring technical teams, fostering collaboration, and contributing to the continuous improvement of cybersecurity architecture practices. Experience in medical devices, laboratory diagnostics, or other regulated industries is highly desirable.

Work Experience

• Engineering, or a related technical discipline, or equivalent experience. Minimum 10+ years of experience in software engineering, product cybersecurity, or security architecture, including 3+ years leading technical teams or cybersecurity initiatives.
• Demonstrated expertise in product cybersecurity architecture, cybersecurity architecture planning, Threat and Risk Assessments (TRA), threat modeling, security requirements definition and disposition, secure design principles, attack surface analysis, and security design reviews for complex software-enabled products.
• Strong knowledge of secure software development, cybersecurity risk management, vulnerability assessment, penetration testing, security control selection, security verification, and risk-based engineering decision making, with the ability to translate technical findings into practical engineering solutions.