Product & Solution Security Professional

**Hey Innovator**

We empower our people to stay resilient and relevant in a constantly evolving world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future.

Does that sound like you? Then it seems like you’d make an outstanding addition to our vibrant team.

Siemens Technology and Services Private Limited (STSPL) is the Indian subsidiary of German multinational engineering and electronics conglomerate Siemens that focuses on IT and management services. The subsidiary is split into four units: Corporate Technology India, Siemens Corporate Finance and Controlling, Global Shared Services, and Siemens Management Consulting. Located in **Balewadi High Street** in **Pune**, it has over 5000 employees.

We are looking for a **Product & Solution Security Professional**meeting the need for smart-mobility solutions.

We are making the lives of people who travel easier and more enjoyable while constantly developing new, intelligent mobility solutions.

**Your new role - challenging and future-oriented**

You work in engineering for our international locomotive projects. In this interesting environment, you interact with engineers from various disciplines.
- As a Cybersecurity / IT Security Expert (M/F/d), you are responsible for carrying out the product and solution security process.
- You specify and maintain security requirements. Furthermore, you support the fulfillment of security standards and regulations.
- You create security architecture for locomotives or products as part of a team.
- Additionally, you coordinate requirements from suppliers and customers with security experts.
- You implement concepts for securing and protecting locomotives and provide technical support for the implementation of IT security.
- You develop software for diagnostics (as well as security functions), conduct security reviews, and harden critical components (secure hardening).

**We don’t need superheroes, just super minds**
- Education:

- Bachelor's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field. A master's degree is a plus.
- Experience:

- 2-4 years of experience in cybersecurity engineering, preferably in the transportation or industrial control systems (ICS) sectors.
- Experience with rolling stock systems or other transportation technologies is highly desirable.
- In addition, you have gained initial experience in IT security and have acquired knowledge of IT security technologies and concepts.
- You have good programming skills (C / C++ / python) and ideally good Linux knowledge. You also stand out with experience in the development of embedded systems.
- Additionally, you score points with expertise in industrial communication and tools for secure testing (e.g., Nessus).
- Skills & Competencies:

- Strong knowledge of cybersecurity principles, risk management, and threat analysis.
- Proficiency with cybersecurity tools and technologies used for monitoring, detection, and incident response.
- Familiarity with cybersecurity standards and regulations such as IEC 62443, ISO 27001, NIST, etc.
- Excellent problem-solving and analytical skills.
- Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Certifications:

- Relevant certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Work Environment**:

- Primarily office-based, with occasional travel to rail depots, workshops, or other operational sites as needed.

Physical Requirements**:

- Ability to occasionally work in challenging environments, including onboard trains, workshops, and depots.

**We’ve got quite a lot to offer. How about you?**

This role is based in Pune. You’ll also get to visit other locations in India and beyond, so you’ll need to go where this journey takes you. In return, you’ll get the chance to work with teams impacting entire cities, countries - and the shape of things to come.