Cybersecurity Specialist for Vulnerability Management (f/m/d)

Snapshot of Your Day 

Our Industrial Cybersecurity department is seeking a highly qualified and driven industrial cybersecurity specialist to support vulnerability management efforts within the Product and Solutions domain. As an Industrial Cybersecurity Specialist, you will play a critical role in ensuring the security posture of wind power plants by proactively identifying and supporting the remediation of potential security risks. You will become part of the Industrial Cybersecurity Technical Competence Center (TCC), a diverse and international team of experienced cybersecurity professionals supporting the business and development teams in securing systems by default across Product and Solutions, Manufacturing IT and Business managed IT. In this role you will play a key role in supporting and enhancing the vulnerability management process to strengthen the security posture of company’s products and solutions. 

How You’ll Make an Impact 

• Driving and continuously improving the vulnerability management process.
• Staying up to date with emerging security threats, vulnerabilities, and industry best practices to continuously improve our vulnerability management program.
• Assessing identified vulnerabilities by analyzing their severity, exploitability, and relevance to our company’s products and solutions.
• Collaborating with cross-functional teams to define and implement effective remediation strategies and action plans.
• Supporting the development of mitigation plans to address vulnerabilities by applying patches, implementing alternative safeguards, or facilitating risk acceptance decisions.
• Advising stakeholders on security best practices and providing recommendations for effective vulnerability treatment.
• Reporting on vulnerability findings, remediation efforts, and overall security posture to senior management and relevant stakeholders.

What You Bring

• A university degree in Cybersecurity, Information Technology, Computer Science, or a comparable field
• Profound experience in cybersecurity, product security or OT security, preferebly in the energy sectore. Experience with widely recognized OT cybersecurity standards, including ISA/IEC 62443, NIST SP 800-82, and ISO 27001 is preferred. Experience with regulatory compliance requirements specific to OT environments (e.g., NIS2 NERC CIP, EU Cyber Resilience Act) is highly welcome.
• Deep expertise in vulnerability management, including conducting assessments, performing security testing, and developing remediation strategies
• Deep understanding of common security vulnerabilities, attack vectors, and exploitation techniques. Hands-on experience with industry-standard vulnerability scanning techniques and tools (e.g., Nessus, Qualys, Burp Suite, OWASP ZAP)
• Familiarity with industry-standard SCA and SAST techniques and tools (BlackDuck, Snyk, SonarQube). Knowledge and experience with SCADA and Industrial Control Systems is preferred.
• Fluency in English and excellent communication and interpersonal skills, with the ability to collaborate across functions and convey technical concepts to non-technical stakeholders
• Relevant cybersecurity certifications such as CEH, OSCP, PNPT, GICSP, ISA/IEC 62443 Cybersecurity Expert are highly welcome.

About the Team

Our Global Functions are essential in driving the company's strategic initiatives and ensuring operational excellence across various departments, business areas, and regions. These roles support our vision to become the most valued energy technology company in the world. As part of our team, you contribute to our vision by shaping the global energy transition, partnering with our internal and external stakeholders, and conducting business responsibly and in compliance with legal requirements and regulations.

Who is Siemens Energy? 

At Siemens Energy, we are more than just an energy technology company. With ~100.000 dedicated employees in more than 90 countries, we develop the energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world's electricity generation.

Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.      

Find out how you can make a difference at Siemens Energy: