Siemens Healthineers is a global leader in delivering medical solutions that improve patient care and healthcare outcomes. We are looking for a talented and motivated Cybersecurity Expert to join our Customer Services team.
Responsibilities:
• Lead Product Security Initiatives: Champion cybersecurity across the Secure Development Lifecycle (SDLC), ensuring security is embedded from design to deployment.
• Define Secure Development Standards: Establish and enforce secure coding practices, architectural guidelines, and design principles to protect products from emerging threats.
• Collaborate with Development Teams: Partner with engineers and architects to integrate security measures into application design, code, and infrastructure.
• Conduct Security Assessments: Perform vulnerability assessments, static and dynamic code analysis, and penetration testing to proactively identify and mitigate risks.
• Support Advanced Security Testing: Validate the effectiveness of implemented controls through targeted security and penetration tests.
• Act as a Security Advisor: Provide expert guidance on secure architecture, third-party integrations, and compliance with relevant standards and regulations.
• Drive Continuous Improvement: Stay ahead of evolving cyber threats, refine security practices, and promote DevSecOps adoption across teams.
Educational Qualification: BE / B.Tech / MCA or equivalent
Required Skills & Experience:
• Cybersecurity Expertise: Minimum 4 years hands on experience as Cybersecurity engineer with overall experience of 10+ years. Strong understanding of security principles, risk management, and secure development lifecycle practices.
• Software Development Knowledge: Proficiency in programming/scripting (e.g., Python, PowerShell) and ability to guide secure implementation practices.
• Azure DevOps Expertise: Hands-on experience managing security tasks, integrating security tools, and automating checks in CI/CD pipelines.
• Agile Environment Experience: Proven track record of working in agile teams, contributing to secure coding, process improvement, and vulnerability management.
• Communication Skills: Ability to articulate complex security concepts clearly to both technical and non-technical audiences.
• Security Testing Experience: Experienced in security processes such as threat modeling, risk assessment, secure guidelines, vulnerability monitoring and penetration testing.
• Cloud Security Knowledge: Experience with cloud environments (Azure, AWS) and awareness of certifications such as C5 and TX-RAMP.
• Solid knowledge in ISO270xx series and Vulnerability Management, and Operations Security
• Profound expertise in Identity and Access Management (Authentication, Authorization) with OAuth2.0 and OpenID Connect is strongly desired
________________________________________
Preferred / Nice-to-Have Skills
• DevSecOps Integration: Familiarity with embedding security practices within CI/CD pipelines.
• Linux & Container Security: Knowledge of securing Linux-based systems and containerized environments (e.g., Docker, Kubernetes).
