Siemens Gamesa

A Snapshot of Your Day

 A critical vulnerability in a component we use has been published on the Internet. You analyze the actual risk in the context of our equipment or systems and inform the affected customers. You then plan the next steps, from testing the security updates provided on our test field through to installation at the customer's premises. In addition to day-to-day business, your focus will be on developing new security concepts, revising existing processes and advising external and internal customers.

As part of a hybrid working method, you will work either in the office in Bucharest, on the test site in Forchheim or from your home office.

How You’ll Make an Impact 

• Designing future-proof IT/OT security strategies, creating test procedures for secure patch management with a focus on integrity and minimising downtime

• Setting up and operating a test environment to simulate production systems; carrying out vulnerability analyses, penetration tests and security update tests

• Installing security updates on customer systems, processing 2nd and 3rd level support cases and developing rollback and troubleshooting strategies

• Creating technical documentation, vulnerability analysis reports and maintaining the asset management system for transparency and regulatory compliance

• Analysing and processing customer enquiries, advising on IT/OT security issues and working closely with internal departments and suppliers

• Providing technical expertise for proposal activities, presenting security concepts and supporting the creation of customer-oriented solutions

What You Bring

• Completed studies in network/communication technology, computer science or IT security, alternatively a relevant apprenticeship with several years of professional experience

• Sound knowledge of IT administration (e.g. Windows Server, Active Directory, WSUS, virtualisation) as well as a few years of experience in cybersecurity, preferably in the area of critical infrastructures

• Familiarity with national and international IT security standards in the industrial environment (e.g. BDEW, NERC-CIP, IEC 62443)

• Willingness to spend several days at customer sites across Europe and willingness to travel internationally (approx. 50%)

• Knowledge of English (basic knowledge of German nice-to-have) Customer-orientation, motivation and intercultural interest

• High level of commitment, ability to work in a team and willingness to solve technical challenges pragmatically and purposefully