Within Smart Infrastructure, the CybersecurityCommunity is the trusted partner, enabling the business units to achieve theirambition level in a holistic way. Together we make Cybersecurity real - Tocreate environments that care.

We are looking for a Junior/Intermediate Penetrationtester / Ethical Hacker to ensure an aligned security approach within SiemensSmart Infrastructure regarding information technology (IT) and operationaltechnology (OT) security.

What will your tasks be?

• Identificationof security vulnerabilities
• Executingscans and penetration tests, writing up reports.
• Automatingvulnerability assessment and penetration testing using scripting
• Provisionof security advice with respect to the mitigation and elimination of weaknessesidentified in accordance with current Cyber Security Standards by proposingchanges from source code to software architecture
• Continuousanalysis of threats and weaknesses to develop improved software securityconcepts
• Creationof application security guidelines and integration of those into the relevantoperational and development processes
• Continuousimprovement of know how in the field of application security
• Supportand oversee the implementation of suggested measures to ensure that CyberSecurity is part of the ongoing process
• Analysisof communications security
• Reviewof roles, profiles and authorization objects to identify potential escalationof privileges

What are we expecting?

• Bachelor'sdegree in Computer Science (or related field) or equivalent work experience.
• Skills:
  • Goodunderstanding of software architecture
  • Solidknowledge of technical and organizational aspects of information security
• Experience& knowledge:
• Experiencedwith security frameworks NIST, SOX, HIPPA, OWASP
• Experiencewith using various pentesting tools (BurpSuite, Metasploit, nmap, SQLmap, etc )
• Understandingof HTTP protocol and analysis of computer networks with Wireshark
• Goodunderstanding of intrusion prevention in IT systems, networks and applicationsbacked up by knowledge of theoretical and practical methods, e.g. threatanalysis, penetration test, etc.
• Abilityto clearly communicate and present technical topics
• Abilityto consult in technical and management-related matters
• Languageskills: Good command of English (Spanish or German is an advantage)
• Otherattributes:
  • Goodanalytical and problem-solving skills
  • Goodaptitude for learning new technologies
  • Mustbe able to work in a team environment
  • Advancedinterpersonal and communications skills
  • Goodwritten and verbal communication skills
  • Goodorganizational skills, result oriented, self-motivated and highly collaborative

• Travel requirements:
• Expect minor travelling, for projects/trainings. Up to 4 separate weeks a year.

What would be nice to have?

• Knowledge in Cloud Pentesting
• IoT and hardware Pentesting experience

What do we offer?

• Flexibleschedule and hybrid work: adapt your workday according to your needs.
• Over30 days of annual vacation to recharge energy and spend time with your lovedones.
• Continuouslearning: access our learning platform with a wide variety of courses frompartners like Coursera, GetAbstract, Harvard Business Review, and LinkedIn.
• Attractiveremuneration package: in addition to salary, we offer maintenance allowancesand the PCF program, which provides you with tax advantages. Your effort willbe rewarded comprehensively.

Siemens is committed to equal opportunities for womenand men, as well as diversity as a source of creativity and innovation. Having different types of talent andexperience makes us more competitive and better able to respond successfully tothe society's demands. That's why we value candidates who reflect the diversitywe enjoy in our company.

#LI-AMC #LI-Hybrid