Red Teamer/ Pentester Cybersecurity Audit (m/f/d) (Informatiker/in)

Start your cyber career with us!As part of the globalCybersecurity Assurance function, we help Siemens to achieve their goals byproviding objective, factual and independent assurance to the Siemens ManagingBoard and Audit Committee. As a business partner to Siemens executive management,we leverage our expertise in a wide range of topics to create an impact thatdrives change. We offer a vibrant and inclusive environment which ensures avariety of perspectives and enables big picture thinking.To deliver on ourvision of being pioneers in assurance and a talent incubator for Siemens, weoffer a unique Grow and Development Model. We believe in the concept oflifelong learning and therefore encourage our people towards a mindset wherecontinuous upskilling and reskilling becomes a natural part of our career. Weinvest in our expertise and therefore provide continuous career coaching,trainings and mentoring, all whilst working with top Siemens business leaderson multiple high-profile projects around the world.Our Cybersecurity teamprovides core assurance over the Cybersecurity health of the company whichincludes IT and OT infrastructures, product security, software development andcloud environments. We are on the lookout for people with a great skillset, aninternational mindset and new ideas who understand Siemens businesses and howCybersecurity helps enable and increase market value. Are you one ofthem?To discover more about the global Siemens assurance function FIN A click here (https://assets.new.siemens.com/siemens/assets/api/uuid:832d2c5d-e30c-4163-a1be-9fa3d67f645b/controlling-and-finance-assurance-info-for-applicants.pdf)What part will you play?- As valuable member of the assurance teamyou will be responsible for conducting Cybersecurity assessments acrossthe entire Siemens landscape, including products, services, IT-systems,factories, and software development centers. During this process you willperform ethical hacking activities, design attack scenarios forstate-of-the-art technologies and highlight important observations totranslate technical findings into management information so that they cantake effective actions.- Apply hacking principles and red teammethodologies, tools and techniques to mimic real-world threat behaviorsfaced by the Siemens’s digital environment, e.g. cloud applications,on-premise infrastructure, digital products and services.- You work closely with cybersecurityexperts from multiple industries to improve their solutions by tacklingthe root cause of the issues and find innovative solutions to modernchallenges.- You independently conduct research onlatest developments in Cybersecurity technologies and threats andunderstand how this is impacting and changing the Siemens’ environment.What you need to make real what matters- Strong academic history (Bachelor degree)in IT, Computer Science or other related fields; certifications such asGIAC GPEN, OSCP, CRTP, eJPT, CREST, etc. are a plus.- Good scripting and programming skills andexperience with languages such as Bash, Python, Powershell, andC++ / C#.- 2+ years of professional full-time workingexperience within Siemens or a related industry in penetration testing /red teaming with a proven record of continuous career development.- Demonstrated affinity to learn about thelatest trends in cybersecurity and keep up to date in a continuouslychallenging environment.- You have first experience with one or moreof the following aspects of penetration testing / red teaming: applicationand software security, EDR and antivirus evasion, C2 setup, automation andscaling of security testing, Active Directory attacks, etc.- Demonstrated first experience in capturethe flag (CTFs) events, bug hunting or vulnerability research (CVEs) is aplus.- Experience with leveraging and integrating AI into day-to-day workis considered an advantage.- Fluent in English. German or otherlanguages are a plus.- You demonstrate an international mindsetand are open to international travel, and working in a diverse team.Whilecommitment to our job improves performance, growth happens when we stretchbeyond our comfort zone. FIN A offers ample of opportunities to seek thechallenge:Caring forthe world around us is a crucial part of our working culture at FIN A for over adecade.Everyone at FIN A has the possibility to actively engage in our globalCSR community and make an impact with our socially and environmentally motivedCSR projects.What we offer- 2 to 3 days of mobile working per week as a future global standard- An environment where everyone can bring their whole self to work and feel a sense of belonging- 30 leave days and a variety of flexible working models that allow time off for yourself and your family - Share matching programs to become a shareholder of Siemens AG- Pension plan to ensure financial security - 50+ learning hours per year for both personal and professional growthAny questions left?Click here (https://siemens-my.sharepoint.com/personal/liuyan_siemens_com/Documents/DataBackup250210/D/Arbeit/CFA/CSA/JD/Cyber%20Process%20Auditor%20ERA12.docx) if you wish to find out more about Siemens before applying.As an equal-opportunity employer weare happy to consider applications from individuals with disabilities (https://www.siemens.com/de/de/home/unternehmen/jobs/arbeiten-bei-siemens/jobs-ohne-barrieren.html) .