Cybersecurity Professional

Siemens; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Siemens Limited in India seeks a Cybersecurity Professional to be the security backbone for OT deployments across grid software. You will champion secure architectures and risk-based decision-making while coordinating with R&D, project teams, and TSOs/DSOs to protect critical infrastructure.

The role requires 5+ years in ICS security, strong knowledge of IEC 62443, NERC CIP, and IAM concepts, with excellent English communication. Office/Site work in select India locations is available.

Qualifications

• 5+ years of cybersecurity experience in ICS/SCADA or critical infrastructure.
• Deep knowledge of IEC 62443, NERC CIP, and European regulations (NIS2, CRA).
• Hands-on threat modeling, secure network design, IAM concepts, and vulnerability triage.
• Strong communication and stakeholder management in English.

Responsibilities

• Lead security interfaces for high-stakes customer projects and workshops.
• Oversee secure design, hardening, and network segmentation of SCADA/EMS solutions.
• Assess third-party vulnerabilities using CVSS, VEX, EPSS/KEV; advise risk-based releases.
• Ensure IEC 62443 compliance across project lifecycles with audit artifacts.
• Collaborate on incident preparedness and fail-safe designs to maintain availability.

Skills

ICS cybersecurity

IEC 62443

NERC CIP

Threat modeling

Secure network architectures

IAM concepts

Vulnerability triage

English communication

Education

Bachelor's degree or equivalent

Tools

Firewalls

Data diodes

Job description

Job Description

Job Title

Cybersecurity Professional

Job Location

Anywhere in India

Role Overview

As a Product and Solution Security Expert (PSSE) in Grid Software, you are the cybersecurity backbone for mission-critical Operational Technology (OT) deployments. You will act as the trusted security authority interfacing between our R&D organizations, project engineering teams, and major transmission/distribution system operators (TSOs/DSOs).

Your mission is to secure our advanced SCADA, ADMS, and grid automation solutions against evolving threat landscapes without compromising the strict availability and real-time performance demands of critical infrastructure. You will champion our security posture—safeguarding legacy integration layers while driving robust, secure architectures for modern deployments.

Key Responsibilities

• Customer & Stakeholder Cybersecurity Leadership: Serve as the primary security interface for high-stakes customer projects, leading security alignment workshops, architecture reviews, and defending our security posture against rigorous customer specifications and regulatory frameworks (e.g., NIS2, IEC 62443).
• Secure Architecture & Integration: Oversee the secure design, hardening, and network segmentation of SCADA/EMS solutions deployed in customer environments. Ensure seamless integration of identity and access management (IAM), secure logging, and patch management workflows.
• Risk & Vulnerability Management: Apply our post-freeze risk scorecard methodologies. Evaluate 3rd-party software vulnerabilities using Environmental CVSS, reachability analysis (VEX), and exploit probability (EPSS/KEV) to advise Project Managers and Product Security Officers (PSSOs) on risk-based release decisions.
• Compliance & Certification Support: Drive adherence to IEC 62443-3-3 standards across project lifecycles, preparing documentation, security targets, and evidence for customer audits and factory/site acceptance tests (FAT/SAT).
• Incident Preparedness & Incident Engineering: Collaborate with project teams and incident response units to define fail-open contingency designs, ensuring grid availability takes precedence while containment and remediation occur safely.

Key Deliverables

1. Project Security Architecture & Risk Assessments: Comprehensive security design documents, threat models (STRIDE), and system-specific risk assessments for every assigned critical infrastructure project.
2. Security-Gate Sign-offs: Authoritative security reviews and gate approvals at key project milestones (Architecture, FAT, SAT, Go-Live), backed by quantified risk-mitigation plans.
3. Vulnerability & Patch Management Runbooks: Tailored operational guidelines and risk-scoring rationales for customers handling 3rd-party component patching in live SCADA environments.
4. Regulatory & Audit Artifacts: Audit-ready compliance packages mapping project implementations to IEC 62443 and national critical infrastructure protection (CIP) standards.

What Success Looks Like

• Zero Unmitigated Critical Exposures: High-risk vulnerabilities and architectural gaps are identified, triaged, and mitigated proactively before system integration or customer sign-off.
• Trusted Advisor Status: You earn the absolute confidence of customer CISOs and Bid- and Project Managers by explaining complex OT cybersecurity trade-offs with clarity, pragmatism, and authority.
• Resilient Delivery Without Compromise: Grid availability and performance are never sacrificed; your security frameworks ensure that fail-open mechanisms and robust risk management protect the grid while maintaining operational uptime.
• Seamless Collaboration: Engineering teams, PSSOs, and external partners view you not as a compliance bottleneck, but as an enabler who embeds security cleanly into the delivery lifecycle.

Qualifications

• Degree in Computer Science, Information Security, Electrical Engineering, or equivalent practical experience.
• 5+ years of experience in cybersecurity within Industrial Control Systems (ICS), SCADA, or critical infrastructure sectors.
• Deep working knowledge of IEC 62443, NERC CIP, and European cybersecurity regulations (e.g., NIS2, CRA).
• Hands-on experience with threat modeling, secure network architectures (Purdue Model, firewalls, datadiodes), Identiy and Access Management concepts and vulnerability triaging tools.
• Excellent communication and stakeholder management skills in English

Employment Details

• Organization: Smart Infrastructure
• Company: Siemens Limited
• Field of work: Cybersecurity
• Experience level: Mid-level Professional
• Job type: Full-time
• Work mode: Office/Site only
• Employment type: Permanent

Location(s)

• Bangalore - Karnataka - India
• Chennai - Tamil Nadu - India
• Hyderabad - Telangana - India
• Mumbai - Maharashtra - India