Siemens is a global technology powerhouse that focuses on industry, infrastructure, transport, and healthcare. As one of the world's largest industrial manufacturing companies, it operates on a massive scale, providing innovative solutions for resource-efficient factories, resilient supply chains, and smarter buildings and grids.

In Spain, Siemens maintains a robust presence with major operations centered in Madrid and Barcelona. The company is a significant employer for international professionals, particularly within its Global Business Services (GBS) and specialized IT hubs. Many roles in Spain are designed to support international markets, frequently requiring proficiency in languages such as English, Italian, or French, making it an ideal destination for multilingual expats.

Founded in 1847 in Berlin by Werner von Siemens and Johann Georg Halske, the company began as a telegraph construction firm. Over nearly two centuries, it has grown into a global leader in electronics and electrical engineering.

For international professionals

Operates a major Global Business Services (GBS) hub in Spain that supports international operations.
Frequently recruits for multilingual roles requiring English, Italian, French, or German.
Strong focus on digital innovation with numerous openings for AI, Cybersecurity, and Software Engineering in Madrid and Barcelona.
Offers structured trainee and internship programs suitable for international graduates and PhD students.
Provides a multicultural work environment with a high degree of internal mobility across global offices.

Senior Cybersecurity Incident Responder (f/m/d)

Siemens

Requirements

University degree (BA) in Information Technology, Engineering or similar
Significant work experience in Incident Response including in complex cloud environments; experience in IT Forensics or Vulnerability Management is a plus
Significant technical knowledge with relevant exposure and expertise in IT Security, in several of the following technologies: Linux and Windows operating systems, web-technologies (encryption, HTTP, REST), networking, cloud environments.
Solid understanding of technical and organizational aspects of information security, e.g., through prior defensive or offensive work experience.
Experienced in fundamental attack concepts (terminology, tools, processes, etc.).
Knowledge of cyber threats and vulnerabilities: how to properly identify, triage, and remediate threats based on threat intelligence as well as on analysis of security events, log data and network traffic.
Strong analytical skills with the ability to collect, organize, analyze, and disseminate significant amounts of information with attention to detail and accuracy
Advanced interpersonal skills: clear and concise communication; able to address collaborators of different backgrounds and technical levels and expertise and work proactively
Fluent in spoken and written English, including security terminology.

Original Advert

Experience level

Experienced Professional

Work mode

Hybrid (Remote/Office)

Location(s)

Amadora - Lisboa - Portugal
Madrid - Madrid - Spain

Create a better #TomorrowWithUs 🚀

At Siemens, we build technology solutions to shape the world we live in. We transform industries and societies by combining the real and digital worlds. With over 300.000 of the world's most forward-thinking minds and the power of a presence in more than 190 countries, we make a truly global impact.

Are you one of them? Come join us! ⭐

Looking for a chance to create a positive impact on our society?

Siemens CERT is a team of dedicated Security Engineers with the mission to secure Siemens's infrastructure worldwide. We are responsible for coordinating the response to Cyber Security incidents and conduct investigations within Siemens. We also take part in strategic projects, relying on experience from more than two decades of operating in our industrial environment. Based on that know-how and the latest technological trends, we collaborate with the IT departments and partners in the businesses in Siemens to improve enterprise cybersecurity globally.

As Senior Cybersecurity Incident Responder (f/m/d) you will:

Investigate and follow through on IT security incidents in a geographically distributed environment, considering all relevant technical and non-technical stakeholders during all phases of the incident.
Analyze reports about potential / suspected incidents, collect and analyze technical incident information and log data, generate reports, and ensure progress on incident tickets.
Help improving CERT's internal toolset by contributing with new ideas on functionality and features.
Report to and advise management and other stakeholders to improve and drive Siemens' Cybersecurity posture. Doing so, you will balance level of detail and strategic insight presented on a case-by-case basis.

To make a difference, you must have:

University degree (BA) in Information Technology, Engineering or similar
Significant work experience in Incident Response including in complex cloud environments; experience in IT Forensics or Vulnerability Management is a plus
Significant technical knowledge with relevant exposure and expertise in IT Security, in several of the following technologies: Linux and Windows operating systems, web-technologies (encryption, HTTP, REST), networking, cloud environments.
Solid understanding of technical and organizational aspects of information security, e.g., through prior defensive or offensive work experience.
Experienced in fundamental attack concepts (terminology, tools, processes, etc.).
Knowledge of cyber threats and vulnerabilities: how to properly identify, triage, and remediate threats based on threat intelligence as well as on analysis of security events, log data and network traffic.
Strong analytical skills with the ability to collect, organize, analyze, and disseminate significant amounts of information with attention to detail and accuracy
Advanced interpersonal skills: clear and concise communication; able to address collaborators of different backgrounds and technical levels and expertise and work proactively
Fluent in spoken and written English, including security terminology.

Knowledge or experience in some of the following areas a plus:

Experience in conducting forensics investigations on Windows, Mac or Linux operating systems
Vulnerability Handling / Management
Creation, analysis, and management of threat intelligence
Development of internal tooling (Python, Django, Shell scripting)
Relevant Industry Certifications such as SANS/GIAC (e.g., GCIA, GCIH, GNFA, GCFA), CompTIA Security+ CISSP, CISA, CISM are desirable.

What you can expect from us...

A hybrid and flexible working model to promote a better work-life balance, along with a budget for home office support and the opportunity to do 16 hours a year of volunteer work. A health insurance, access to our on-site medical center, plus the chance to join sports groups.

In addition, you'll have access to online learning platforms and discounts with our partners. A shuttle bus to commute to the facilities and the possibility of financial support to your studies.