Product & Solution Security Professional (Signalling)

Hello Visionary!
We empower our people to stay resilient and relevant in a constantly evolving world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make a phenomenal addition to our vibrant international team.
We are looking for a Product and Solution Security Professional (Signalling)
You’ll make a difference by:
As a PSSE you will be involved in a project from Bid phase till the closure of the project.
Conduct Threat and risk analysis, identifying vulnerabilities and proposing mitigation measures.
Prepare Security concept, defining cyber security relevant activities related to configuration, installation and commissioning of railway signaling and telecommunication systems.
Design, implement, and manage security architectures for railway signaling and telecommunication systems for mass transit and Mainline projects.
Prepare Project specific Security policies and procedures.
Specification and maintenance of security requirements for the project. Support for meeting international and regional security standards and regulations (like IEC62443, ISO27001 and TS50701) in the project.
Evaluation of third-party components from a security point of view.
Preparation of Security Test Plan, test cases and perform security testing(automated and Manual) to ensure the security controls are effectively implemented.
Analysis of vulnerability finding, developing solution to fix the vulnerability if necessary.
Respond to security incidents if any, helps in solution development
Collection of product & solution security related lessons learned and feed into in continuous improvement activities (e.g., update of guidelines, reporting to PSSOs, integration in awareness material).
Can support multiple projects at the same time and should occupy the function for the main part of is defined working time.
You’ll win us over by:
Bachelor’s degree in cybersecurity, computer science or a related field
Has minimum 4-6 years’ experience in one of the fields of professional experience.
Should hold professional certification like CCNA, CCNP, IEC62443, CEH, GISCP, or equivalent.
Deep understanding of OT protocols
Exposure to Security tools Like Nessus, NMAP, IDS/IPS, firewall, application Whitelisting, Anti-virus, SIEM etc
Should have understanding and experience on PKI, Active directory, Networking, Operating systems (Windows and Unix), ICS/SCADA.
Knowledge of Vulnerability management, Security testing, System hardening, Patching etc.
Should have working experience on one of the security standards (IEC 62443 3-2, 3-3, 4-2, 2-1, TS50701, ISO 27001)
Must have good understanding of Railway domain (Signaling Mass Transit / Mainline)
Join us and be yourself!
We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us.
This role is based in Pune, where you’ll get the chance to work with teams, impacting entire cities, countries - and the shape of things to come.
We’re Siemens. A collection of over 312,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and imagination and help us shape tomorrow.
Find out more about Siemens careers at: www.siemens.com/careers & more about mobility at https://new.siemens.com/global/en/products/mobility.html

Work arrangement
No