Within Smart Infrastructure, the Cybersecurity Community is the trusted partner, enabling the business units to achieve their ambition level in a holistic way. Together we make Cybersecurity real - To create environments that care.We are looking for a Junior/Intermediate Penetration Tester / Ethical Hacker to ensure an aligned security approach within Siemens Smart Infrastructure regarding information technology (IT) and operational technology (OT) security.What will your tasks be?Identification of security vulnerabilitiesExecuting scans and penetration tests, writing up reports.Automating vulnerability assessment and penetration testing using scriptingProvision of security advice with respect to the mitigation and elimination of weaknesses identified in accordance with current Cyber Security Standards by proposing changes from source code to software architectureContinuous analysis of threats and weaknesses to develop improved software security conceptsCreation of application security guidelines and integration of those into the relevant operational and development processesContinuous improvement of know-how in the field of application securitySupport and oversee the implementation of suggested measures to ensure that Cyber Security is part of the ongoing processAnalysis of communications securityReview of roles, profiles and authorization objects to identify potential escalation of privilegesWhat are we expecting?Bachelor's degree in Computer Science (or related field) or equivalent work experience.Skills:Good understanding of software architectureSolid knowledge of technical and organizational aspects of information securityExperience & knowledge:Experienced with security frameworks NIST, SOX, HIPAA, OWASPExperience with using various pentesting tools (BurpSuite, Metasploit, nmap, SQLmap, etc.)Understanding of HTTP protocol and analysis of computer networks with WiresharkGood understanding of intrusion prevention in IT systems, networks, and applications backed up by knowledge of theoretical and practical methods, e.g., threat analysis, penetration test, etc.Ability to clearly communicate and present technical topicsAbility to consult in technical and management-related mattersLanguage skills: Good command of English (Spanish or German is an advantage)Other attributes:Good analytical and problem-solving skillsGood aptitude for learning new technologiesMust be able to work in a team environmentAdvanced interpersonal and communications skillsGood written and verbal communication skillsGood organizational skills, result-oriented, self-motivated, and highly collaborativeTravel requirements:Expect minor traveling for projects/trainings. Up to 4 separate weeks a year.What would be nice to have?Knowledge in Cloud PentestingIoT and hardware Pentesting experienceWhat do we offer?Flexible schedule and hybrid work: adapt your workday according to your needs.Over 30 days of annual vacation to recharge energy and spend time with your loved ones.Continuous learning: access our learning platform with a wide variety of courses from partners like Coursera, GetAbstract, Harvard Business Review, and LinkedIn.Attractive remuneration package: in addition to salary, we offer maintenance allowances and the PCF program, which provides you with tax advantages. Your effort will be rewarded comprehensively.Siemens is committed to equal opportunities for women and men, as well as diversity as a source of creativity and innovation. Having different types of talent and experience makes us more competitive and better able to respond successfully to society's demands. That's why we value candidates who reflect the diversity we enjoy in our company.
#J-18808-Ljbffr
