Red Teamer/ Pentester Cybersecurity Audit (m/f/d)

Siemens; Amadora; Presencial; EUR 45 000 - 75 000; Tempo integral

Resumo da oferta

Siemens in Portugal is hiring for its Cybersecurity Assurance team to conduct comprehensive cybersecurity assessments across IT and OT landscapes, products, services and development centers. You will translate technical findings into actionable management information for executive stakeholders.

The role requires strong knowledge in penetration testing and red teaming, hands-on scripting in Bash, Python, PowerShell, and C#/C++, and a proactive, internationally-minded mindset with willingness to

Qualificações

• Bachelor degree in IT, Computer Science or related field.
• Certifications such as GIAC GPEN, OSCP, CREST are a plus.
• Experience in penetration testing / red teaming with a proven track record.

Responsabilidades

• Conduct Cybersecurity assessments across Siemens landscape including IT, OT, products and software development centers.
• Design attack scenarios and translate technical findings into actionable management information.
• Apply hacking principles and red team methodologies to mimic real-world threat behaviors.
• Collaborate with cybersecurity experts and stay updated on latest cybersecurity developments.

Conhecimentos

Penetration testing

Red teaming

Ethical hacking

Scripting (Bash, Python, PowerShell)

C# / C++

Cloud security

English fluency

Formação académica

Bachelor degree in IT / Computer Science

Descrição da oferta de emprego

Start your cyber career with us!
As part of the global Cybersecurity Assurance function, we help Siemens to achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment which ensures a variety of perspectives and enables big picture thinking.

Start your cyber career with us!
As part of the global Cybersecurity Assurance function, we help Siemens to achieve their goals by providing objective, factual and independent assurance to the Siemens Managing Board and Audit Committee. As a business partner to Siemens executive management, we leverage our expertise in a wide range of topics to create an impact that drives change. We offer a vibrant and inclusive environment which ensures a variety of perspectives and enables big picture thinking.
To deliver on our vision of being pioneers in assurance and a talent incubator for Siemens, we offer a unique Grow and Development Model. We believe in the concept of lifelong learning and therefore encourage our people towards a mindset where continuous upskilling and reskilling becomes a natural part of our career. We invest in our expertise and therefore provide continuous career coaching, trainings and mentoring, all whilst working with top Siemens business leaders on multiple high-profile projects around the world.
Our Cybersecurity team provides core assurance over the cybersecurity health of the company which includes IT and OT infrastructures, product security, software development and cloud environments. We are on the lookout for people with a great skillset, an international mindset and new ideas who understand Siemens businesses and how Cybersecurity helps enable and increase market value. Are you one of them?

What par will you play?

• As valuable member of the assurance team you will be responsible for conducting Cybersecurity assessments across the entire Siemens landscape, including products, services, IT-systems, factories, and software development centers. During this process you will perform ethical hacking activities, design attack scenarios for state-of-the-art technologies and highlight important observations to translate technical findings into management information so that they can take effective actions.
• Apply hacking principles and red team methodologies, tools and techniques to mimic real-world threat behaviors faced by the Siemens’s digital environment, e.g. cloud applications, on-premise infrastructure, digital products and services.
• You work closely with cybersecurity experts from multiple industries to improve their solutions by tackling the root cause of the issues and find innovative solutions to modern challenges.
• You independently conduct research on latest developments in Cybersecurity technologies and threats and understand how this is impacting and changing the Siemens’ environment.
  

What You Need To Make Real What Matters

• Strong academic history (Bachelor degree) in IT, Computer Science or other related fields; certifications such as GIAC GPEN, OSCP, CRTP, eJPT, CREST, etc. are a plus.
• Good scripting and programming skills and experience with languages such as Bash, Python, Powershell, and C++ / C#.
• 2+ years of professional full-time working experience within Siemens or a related industry in penetration testing / red teaming with a proven record of continuous career development.
• Demonstrated affinity to learn about the latest trends in cybersecurity and keep up to date in a continuously challenging environment.
• You have first experience with one or more of the following aspects of penetration testing / red teaming: application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Demonstrated first experience in capture the flag (CTFs) events, bug hunting or vulnerability research (CVEs) is a plus.
• Experience with leveraging and integrating AI into day-to-day work is considered an advantage.
• Fluent in English. German or other languages are a plus.
• You demonstrate an international mindset and are open to international travel, and working in a diverse team.
  

While commitment to our job improves performance, growth happens when we stretch beyond our comfort zone. CF A offers ample of opportunities to seek the challenge:
Caring for the world around us is a crucial part of our working culture at CF A for over a decade.
Everyone at CF A has the possibility to actively engage in our global CSR community and make an impact with our socially and environmentally motived CSR projects.

Any questions left?