Siemens
Product and Solution Security Expert
This job is now closed
Job Description
- Req#: 369743
We spend 90 percent of our lives in buildings. It follows that the buildings where we spend our lives have an enormous impact on our lives. On what we do, how we feel, who we are, who we become. At Siemens, we believe that everything people do in life deserves a magnificent place to do it. A detailed place to learn. Building Technology is an in-house global competence center for software engineering. We work closely with the Siemens Divisions to engineer creative products and services across the world. Our team of over 3,000 professionals forms a meaningful part of the global network of about 17,500 software guides within Siemens. In India, we have offices in Bengaluru, Chennai, Gurgaon, Noida, and Pune. This Role is Primarily for Chennai Location. We don’t need superheroes, just super minds. PSSE: Professional & Expert category. Experience Range- 6 to 9 years. Define Regulations & Support Implementation: Support of the project leader during the planning of security relevant activities in the project Support the project leader to build up required competencies for product & solution security within the project team . Coaching of project teams during product & solution development (e.g., creation of requirements specifications, architecture and design, implementations, test cases, user documentation) Specification and maintenance of secure coding, secure design guidelines Synchronize adequately with Information Security organization to ensure that the development, and integration IT-infrastructure is sufficiently secure (e.g., to ensure confidentiality, integrity or availability of source code, binaries and configuration). Review of documents produced during the development process (e.g., threat and risk analysis results, requirements specification, architecture and design, test specification, user documentation) regarding product & solution security. Guide Technological Aspects. Planning and performing threat and risk analysis (TRA) and definition of countermeasures in line with risk acceptance criteria of organization Evaluation of third-party components regarding product & solution security Clearance of implementation and documentation of security critical components (e.g. cryptographic functions, hidden function, firewall settings) Perform code analysis to identify security vulnerabilities and check compliance with secure coding guidelines. This includes recommendation and creation of static code analysis tools. Verification of implementation regarding security requirements (e.g., as part of system test, factory or site acceptance test). This includes recommendation and creation of security testing tools. Validation (e.g., friendly hacking, penetration testing) to ensure that implementation fulfills security expectations of customers. This includes recommendation creation of security testing tools. Involvement in the analysis and handling of security vulnerabilities & incidents Support Communication: Exchange experiences with internal and external product & solution security community and monitor standards and trends. Contact person for product management (e.g., during contract negotiation) for security topics. Support for communication with customer (e.g., security-relevant information and available security updates). Demonstrates and engages to go beyond short term execution mindset towards long term implications of work. Builds trust and helps the customer to choose between solutions best suited by demonstrating in-depth understanding of customer needs and issues. Encourages collaborative decision making within the team. Provides task-oriented support. Good time management and communication skills. Measure & Report: Good time management and communication skills. Participate in release of products or solutions from PSS standpoint (e.g., at certain milestones or quality gates) Collection of product & solution security related lessons learned and feed into continuous improvement activities (e.g., update of guidelines, reporting to PSSOs, integration in awareness material) . Make your mark in our exciting world at Siemens. This role is primarily based at Chennai. However, you may get the opportunity to visit other locations within India as and when the work demands. We’ve got quite a lot to offer. How about you? We’re Siemens. A collection of over 379,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and creativity and help us craft tomorrow. Find out more about Siemens careers at: https://new.siemens.com/global/en/company/jobs.html Organization: Advanta Company: Siemens Technology and Services Private Limited Experience Level: Experienced Professional Full / Part time: Full-timeAbout the company
The principal divisions of the corporation are Industry, Energy, Healthcare, and Infrastructure & Cities, which represent the main activities of the corporation.
Notice
Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at accessibility@talentify.io or 407-000-0000.
Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.
An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report. NYC applicants may request an alternative process or accommodation at aedt@talentify.io or 407-000-0000.