Product & Solution Security Professional

Hey Innovator  

We empower our people to stay resilient and relevant in a constantly evolving world. Were looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future.

Does that sound like you? Then it seems like youd make an outstanding addition to our vibrant team.

Siemens Technology and Services Private Limited (STSPL) is the Indian subsidiary of German multinational engineering and electronics conglomerate Siemens that focuses on IT and management services. The subsidiary is split into four unitsCorporate Technology India, Siemens Corporate Finance and Controlling, Global Shared Services, and Siemens Management Consulting. Located inBalewadi High Street inPune , it has over 5000 employees.

We are looking for aProduct & Solution Security Professional meeting the need for smart-mobility solutions.

We are making the lives of people who travel easier and more enjoyable while constantly developing new, intelligent mobility solutions.

Your new role- challenging and future-oriented  

You work in engineering for our international locomotive projects. In this interesting environment, you interact with engineers from various disciplines.

- As a Cybersecurity / IT Security Expert (m/f/d), you are responsible for carrying out the product and solution security process.
- You specify and maintain security requirements. Furthermore, you support the fulfillment of security standards and regulations.
- You create security architecture for locomotives or products as part of a team.
- Additionally, you coordinate requirements from suppliers and customers with security experts.
- You implement concepts for securing and protecting locomotives and provide technical support for the implementation of IT security.
- You develop software for diagnostics (as well as security functions), conduct security reviews, and harden critical components (secure hardening).

We dont need superheroes, just super minds  

- Education
- Bachelor's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field. A master's degree is a plus.
- Experience
- 2-4 years of experience in cybersecurity engineering, preferably in the transportation or industrial control systems (ICS) sectors.
- Experience with rolling stock systems or other transportation technologies is highly desirable.
- In addition, you have gained initial experience in IT security and have acquired knowledge of IT security technologies and concepts.
- You have good programming skills (C / C++ / python) and ideally good Linux knowledge. You also stand out with experience in the development of embedded systems.
- Additionally, you score points with expertise in industrial communication and tools for secure testing (e.g., Nessus).
- If you also have knowledge of relevant standards such as IEC 62443 and a CISSP certification, your application is very welcome
- Skills & Competencies
- Strong knowledge of cybersecurity principles, risk management, and threat analysis.
- Proficiency with cybersecurity tools and technologies used for monitoring, detection, and incident response.
- Familiarity with cybersecurity standards and regulations such as IEC 62443, ISO 27001, NIST, etc.
- Strong programming skills in C and C++, with hands-on experience in developing and debugging embedded or system-level applications
- Excellent problem-solving and analytical skills.
- Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Certifications
- Relevant certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Work Environment  

- Primarily office-based, with occasional travel to rail depots, workshops, or other operational sites as needed.

Physical Requirements  

- Ability to occasionally work in challenging environments, including onboard trains, workshops, and depots.