Senior Cybersecurity Incident Responder (f/m/d)

Create a better #TomorrowWithUs

At Siemens, we build technology solutions to shape the world we live in. We transform industries and societies by combining the real and digital worlds. With over 300.000 of the world’s most forward-thinking minds and the power of a presence in more than 190 countries, we make a truly global impact.

Are you one of them? Come join us!

Looking for a chance to create a positive impact on our society?
Siemens CERT is a team of dedicated Security Engineers with the mission to secure Siemens’s infrastructure worldwide. We are responsible for coordinating the response to Cyber Security incidents and conduct investigations within Siemens. We also take part in strategic projects, relying on experience from more than two decades of operating in our industrial environment. Based on that know-how and the latest technological trends, we collaborate with the IT departments and partners in the businesses in Siemens to improve enterprise cybersecurity globally.

As Senior Cybersecurity Incident Responder (f/m/d) you will:
Investigate and follow through on IT security incidents in a geographically distributed environment, considering all relevant technical and non-technical stakeholders during all phases of the incident.
Analyze reports about potential / suspected incidents, collect and analyze technical incident information and log data, generate reports, and ensure progress on incident tickets.
Help improving CERT’s internal toolset by contributing with new ideas on functionality and features.
Report to and advise management and other stakeholders to improve and drive Siemens’ Cybersecurity posture. Doing so, you will balance level of detail and strategic insight presented on a case-by-case basis.

To make a difference, you must have:
University degree (BA) in Information Technology, Engineering or similar
Significant work experience in Incident Response including in complex cloud environments; experience in IT Forensics or Vulnerability Management is a plus
Significant technical knowledge with relevant exposure and expertise in IT Security, in several of the following technologies: Linux and Windows operating systems, web-technologies (encryption, HTTP, REST), networking, cloud environments.
Solid understanding of technical and organizational aspects of information security, e.g., through prior defensive or offensive work experience.
Experienced in fundamental attack concepts (terminology, tools, processes, etc.).
Knowledge of cyber threats and vulnerabilities: how to properly identify, triage, and remediate threats based on threat intelligence as well as on analysis of security events, log data and network traffic.
Strong analytical skills with the ability to collect, organize, analyze, and disseminate significant amounts of information with attention to detail and accuracy
Advanced interpersonal skills: clear and concise communication; able to address collaborators of different backgrounds and technical levels and expertise and work proactively
Fluent in spoken and written English, including security terminology.

Knowledge or experience in some of the following areas a plus:
Experience in conducting forensics investigations on Windows, Mac or Linux operating systems
Vulnerability Handling / Management
Creation, analysis, and management of threat intelligence
Development of internal tooling (Python, Django, Shell scripting)
Relevant Industry Certifications such as SANS/GIAC (e.g., GCIA, GCIH, GNFA, GCFA), CompTIA Security+ CISSP, CISA, CISM are desirable.

What you can expect from us…
A hybrid and flexible working model to promote a better work-life balance, along with a budget for home office support and the opportunity to do 16 hours a year of volunteer work. A health insurance, access to our on-site medical center, plus the chance to join sports groups.
In addition, you'll have access to online learning platforms and discounts with our partners. A shuttle bus to commute to the facilities and the possibility of financial support to your studies.

Please attach your CV in English.

At Siemens, we value the diversity of our teams, promote equal opportunities, and foster an inclusive work environment. We welcome talent without distinction, respecting and supporting all forms of diversity. Our Equality Plan, in accordance with current legislation, ensures fair and transparent treatment, and reinforces our commitment to building an increasingly equitable and diverse workplace.