• As valuable member of the assurance team you will be responsible for conducting Cybersecurity assessments across the entire Siemens landscape, including products, services, IT-systems, factories, and software development centers. During this process you will perform ethical hacking activities, design attack scenarios for state-of-the-art technologies and highlight important observations to translate technical findings into management information so that they can take effective actions. 
• Apply hacking principles and red team methodologies, tools and techniques to mimic real-world threat behaviors faced by the Siemens’s digital environment, e.g. cloud applications, on-premise infrastructure, digital products and services.
• You work closely with cybersecurity experts from multiple industries to improve their solutions by tackling the root cause of the issues and find innovative solutions to modern challenges.
• You independently conduct research on latest developments in cybersecurity technologies and threats and understand how this is impacting and changing the Siemens’ environment.

What you need to make real what matters.

• Strong academic history (Master degree) in IT, Computer Science or other related fields; certifications such as GIAC GPEN,  OSCP, OSWE, CRTP, eJPT, CREST, etc. are a plus. 
• Good scripting and programming skills and experience with languages such as Bash, Python,  Powershell, and C++ / C#.
• Solid Background and years of professional experience within Siemens or a related industry in penetration testing with a proven record of continuous career development.
• Demonstrated affinity to learn about the latest trends in cybersecurity and keep up to date in a continuously challenging environment.
• You have experience with one or more of the following aspects of penetration testing / red teaming: application and software security, EDR and antivirus evasion, C2 setup, automation and scaling of security testing, Active Directory attacks, etc.
• Demonstrated experience in capture the flag (CTFs) events, bug hunting or vulnerability research (CVEs) is a plus.
• You demonstrate an international mindset and are open to travelling and working in a diverse team.
• You have a great attitude, curiosity, and willingness to learn.