Cybersecurity (IT & OT) Expert

Job Description

About Siemens Energy: Siemens Energy is a global leader in energy technology, driving the transition to a more sustainable world. Our Cybersecurity team safeguards critical infrastructure and digital assets across IT and OT environments, ensuring resilience against evolving cyber threats. Role Overview: As a Cybersecurity Core Team Member , you will be responsible for implementing and maintaining robust cybersecurity measures across IT systems and Operational Technology (OT) environments, including Industrial Control Systems (ICS) and Automation platforms . This is a hands-on technical role requiring strong expertise in cybersecurity frameworks, coding, and ethical hacking. Key Responsibilities: IT Security: Implement and monitor security controls for enterprise IT systems, networks, and cloud environments. Conduct vulnerability assessments, penetration testing, and incident response. OT Security: Secure Industrial Control Systems (ICS) and SCADA environments in compliance with standards like IEC 62443, NERC CIP, and other regulatory frameworks. Perform risk assessments and threat modeling for OT networks and automation systems. Collaborate with engineering teams to integrate security into control systems and automation projects. Hands-On Technical Work: Develop scripts and tools for security automation, vulnerability scanning, and threat detection. Perform ethical hacking and red-team exercises to identify and remediate weaknesses. Analyze malware, reverse engineer exploits, and contribute to secure coding practices. Compliance & Governance: Ensure adherence to global cybersecurity standards and Siemens Energy policies. Prepare documentation for audits, certifications, and regulatory compliance. Required Skills & Qualifications: Education: Bachelor?s or Master?s degree in Computer Science, Information Technology, Cybersecurity, or related field. Technical Expertise: Strong knowledge of cybersecurity concepts for IT and OT environments. Familiarity with IEC 62443, NERC CIP, and other OT security standards. Proficiency in programming/scripting languages (Python, C/C++, PowerShell, Bash). Experience with penetration testing tools (Metasploit, Burp Suite, Nmap, Wireshark). Understanding of ICS protocols (Modbus, DNP3, OPC-UA). Certifications (Preferred): CEH, OSCP, CISSP, GICSP, or equivalent. Experience: 6-10 years of hands-on cybersecurity experience in IT and OT domains. Proven track record in ethical hacking, vulnerability management, and secure coding. Soft Skills: Strong analytical and problem-solving abilities. Ability to work in cross-functional teams and communicate effectively. Continuous learning mindset to stay updated on emerging threats and technologies. Why Join Us? Work on cutting-edge cybersecurity challenges in critical infrastructure. Be part of a global team driving energy transformation securely. Opportunities for professional growth and advanced training.