At Siemens Energy, we can. Our technology is key, but our people make the difference. Brilliant minds innovate. They connect, create, and keep us on track towards changing the world’s energy systems. Their spirit fuels our mission.
Our culture is defined by caring, agile, respectful, and accountable individuals. We value excellence of any kind. Sounds like you?

How You'll Make an Impact

• Provide expert cybersecurity and data security guidance to product development teams, supporting secure architecture, secure design decisions, and risk-based implementation of security controls.
• Drive the implementation, maintenance, and continuous improvement of information security and product security practices aligned with ISO 27001, IEC 62443, and applicable industry standards.
• Support compliance with the EU Cyber Resilience Act and other relevant regulatory requirements by translating security obligations into practical engineering and operational controls.
• Conduct risk assessments, vulnerability analyses, and impact evaluations to identify security threats, assess business and technical exposure, and recommend effective mitigation strategies.
• Promote a strong security culture by developing and delivering cybersecurity and data protection awareness initiatives for technical and non-technical stakeholders.

What You Bring - Required

• Minimum of 7 years of professional experience across cybersecurity domains, including cloud security, secure software development lifecycle, product security, and data security.
• Demonstrated experience in the secure configuration, operation, and maintenance of cloud environments, preferably with strong exposure to AWS security services and best practices.
• Solid understanding of regulatory and security standards such as ISO 27001, IEC 62443, GDPR, and other applicable data protection and cybersecurity frameworks.
• Proven experience in vulnerability management, including impact assessment, prioritization, remediation planning, and evaluation of mitigation strategies.
• Experience performing cybersecurity risk assessments in operational technology or industrial environments, with the ability to translate risks into actionable security requirements.
• Familiarity with industrial communication protocols such as Modbus/TCP, IoT messaging protocols such as MQTT and AMQP and the risks associated with them
• Ability to lead secure development lifecycle initiatives, coordinate cross-functional stakeholders, and drive implementation of security governance practices within product development teams.
• Professional certifications such as CISSP, CCSP, AWS Security Specialty, or equivalent cloud and cybersecurity certifications are considered an advantage.