- Raleigh - Caroline du Nord - États-Unis d'Amérique
Product & Solution Security Officer (PSSO)
- Define, own, and continuously improve the Product & Solution Security (PSS) strategy and implementation policy for Siemens Asset Management Software ensuring alignment with Siemens corporate policies, regulatory requirements, and contractual obligations.
- Monitor the threat landscape, track reported vulnerabilities and security incidents, and incorporate findings into strategic planning.
- Establish and maintain a process improvement program to embed security practices across the software development lifecycle (SDLC).
- Ensure organizational readiness for product and solution security across all BSW teams and product lines.
- Own and operate Siemens product vulnerability management program end-to-end — from identification and triage through remediation tracking and closure.
- Classify and prioritize vulnerabilities and security incidents in coordination with the CISO, driving timely and effective response.
- Support incident response efforts, serving as a key contributor during active security events affecting BSW products.
- Develop and maintain a supplier security qualification and certification program.
- Build strong, trusted relationships with product management, R&D, and engineering teams to ensure security requirements are clearly communicated, understood, and implemented.
- Serve as the primary security advisor to product and development stakeholders, guiding secure design decisions and threat modeling efforts.
- Coordinate technical direction for product security mechanisms in collaboration with the product security engineer and project-level security contributors.
- Advise on appropriate processes, tooling, and structures to introduce and sustain security across products, solutions, and services.
- Represent Siemens Asset Management Software in all product and solution security matters — internally across the organization and externally as needed.
- Advise executive management, product management, and R&D leadership on security posture, risks, and strategic priorities.
- Ensure coordinated security messaging in alignment with Corporate Communications and the CISO.
- Synchronize with the Information Security organization to ensure appropriate coverage across both product and IT infrastructure security domains.
- Build and maintain an internal product security community, fostering awareness and a security-first culture across the business unit.
- Track and report on adherence to product and solution security standards, policies, and the implementation strategy.
- Define risk acceptance criteria in collaboration with relevant stakeholders; lead escalation decisions for elevated security risks in products and solutions.
- Provide regular reporting to the CISO; escalate emergencies promptly and synchronize with peer Product & Solution Security Officers across Siemens.
- Coordinate product security compliance with legal, import, and export teams as required.
- 7+ years of experience in cybersecurity, with at least 3–5 years focused on product security, application security, or secure software development.
- Demonstrated experience owning or leading a vulnerability management program, including triage, prioritization, and remediation tracking.
- Strong understanding of secure SDLC practices, including threat modeling, security requirements definition, and security testing integration.
- Experience working with cloud-based SaaS products and familiarity with common SaaS security risks and controls.
- Proven ability to partner with and influence engineering and product teams without direct authority — you build trust, not bureaucracy.
- Solid understanding of relevant security frameworks and standards (e.g., NIST CSF, ISO 27001, OWASP, CVE/CVSS scoring).
- Experience supporting or leading incident response efforts in a product or application security context.
- Strong written and verbal communication skills — you can translate complex security concepts for both technical and non-technical audiences.
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Experience in a SaaS or software product company, ideally with exposure to asset management, IoT, or infrastructure technology domains.
- Familiarity with Siemens Product & Solution Security (PSS) policies and frameworks, or similar enterprise security governance structures.
- Relevant certifications such as CISSP, CSSLP, CEH, or GIAC GWEB/GPEN.
- Experience building or maturing a product security program from the ground up — you know what good looks like and how to get there.
- Comfort operating in a lean, high-ownership environment where you drive outcomes with a small, focused team.
- Exposure to regulatory and compliance requirements relevant to SaaS products serving public sector, healthcare, or critical infrastructure clients (e.g., FedRAMP, HIPAA, SOC 2, ISO 27001).
- Interest in AI and how to secure it—from safeguarding AI/ML components in products to exploring emerging AI threats. Expertise is a strong plus, but enthusiasm and an appetite to dive in are just as valuable.
Siemens offers a variety of health and wellness benefits to our employees. Details regarding our benefits can be found here: https://www.benefitsquickstart.com/siemens/index.html
The pay range for this position is $137,731 - $236,110 annually. The actual wage offered may be lower or higher depending on budget and candidate experience, knowledge, skills, qualifications, and premium geographic location.
Equal Employment Opportunity Statement
Siemens is an Equal Opportunity Employer encouraging inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.
EEO is the Law
Applicants and employees are protected from discrimination on the basis of race, color, religion, sex, national origin, or any characteristic protected by Federal or other applicable law.
Reasonable Accommodations
If you require a reasonable accommodation in completing a job application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please fill out the accommodations form by clicking on this link Accommodation
for disability form. If you’re unable to complete the form, you can reach out to our AskHR team for support at 1-866-743-6367. Please note our AskHR representatives do not have visibility of application or interview status.
Pay Transparency
Siemens follows Pay Transparency laws.
California Privacy Notice
California residents have the right to receive additional notices about their
personal information. To learn more, click here.
Qualified applications with arrest or conviction records will be considered for employment in accordance with applicable local and state laws.