Senior Cybersecurity Incident Responder (f/m/d)

Das ist der Job

Our insights from real-world incident handling directly influence how cybersecurity is strengthened across Siemens.

Darum lohnt es sich

Senior Cybersecurity Incident Responder (f/m/d) Job ID: 509581 Posted since: 09-Jun-2026 Organization: Cybersecurity Field of work: Cybersecurity Experience level: Experienced Professional Job type: Full-time Employment type: Permanent If you really want to make a difference – make it with us Siemens CERT is a global team of dedicated security engineers with the mission to protect Siemens’ infrastructure and services worldwide.

Working closely with IT functions and business units, we drive continuous improvement of the company’s cyber resilience – combining operational expertise with modern technologies and evolving threat intelligence. A wide range of flexible benefits for you and your family to enjoy!

The individual benefits are subject to regulatory, contractual, or corporate conditions. We coordinate the response to cybersecurity incidents across a complex, globally distributed environment, and lead in-depth technical and organizational investigations.

Building on more than two decades of experience in industrial and enterprise environments, we also contribute to strategic cybersecurity initiatives. What we offer you An environment where everyone can bring their whole self to work and feel a sense of belonging.

A workplace that values curiosity and guarantees continuous learning, with development opportunities for both personal and professional growth. Share matching programs to become a shareholder of Siemens AG.

You’ll make an impact by Investigate and follow through on IT security incidents in a geographically distributed environment, considering all relevant technical and non-technical stakeholders during all phases of the incident.

Analyze reports about potential / suspected incidents, collect and analyze technical incident information and log data, generate reports, and ensure progress on incident tickets.

Act as a central point of contact for incident‑related communication in Germany, including coordination with internal stakeholders as well as external parties such as regulators, authorities, and law enforcement. Coordinate incident response activities with local business units, ensuring alignment with global CERT processes.

Actively shape and continuously enhance CERT’s internal toolset by contributing innovative ideas for new functionalities and features. Report to and advise management and other stakeholders to improve and drive Siemens’ Cybersecurity posture. Doing so, you will balance level of detail and strategic insight presented on a case‑by‑case basis.

This is how you’ll win us over Education University degree (MA) in Information technology, Engineering or a related field Clean track record and willingness to comply if a security clearance becomes necessary (especially Ü2).

Experience & Skills Significant work experience (>7 years) in Incident Response, including handling complex incidents in enterprise and cloud environments; experience in IT Forensics or Vulnerability Management is a plus Strong technical expertise in IT security across several of the following areas: Linux and Windows operating systems, web technologies (e.g. encryption, HTTP, REST), networking, and cloud environments Solid understanding of both technical and organizational aspects of information security, e.g. through prior defensive or offensive security experience Experience with fundamental attack techniques, tools, and methodologies, as well as a strong understanding of attacker behavior Excellent understanding of current cyber threats and vulnerabilities, including the ability to identify, triage, and support remediation of security incidents based on threat intelligence, log data, and network analysis Experience in incident documentation and reporting, ideally in environments with regulatory or compliance‑related requirements Strong analytical skills with the ability to collect, structure, and interpret large amounts of information with high attention to detail and accuracy Strong interpersonal and communication skills, with the ability to interact effectively with technical and non‑technical stakeholders, including senior management and external parties Ability to operate in complex stakeholder environments and act as a reliable interface in high‑pressure situations Ways of working: analytical, problem‑solving attitude with strong decision‑making abilities and a growth mindset Languages: business proficiency in German and English, including security‑related terminology As an equal‑opportunity employer we are happy to consider applications from individuals with disabilities.

In the case of equal qualifications, severely disabled applicants and applicants with equivalent status will be given preference. #J-18808-Ljbffr