Product and Solution Security Expert for Cloud Solutions

Job description

Job ID: 300197
Work location: Zug
Mode of employment: Full time only

If you really want to make a difference – make it with us

Siemens Division Building Technologieswith its international headquarters in Zug, Switzerland, isa global market leader in the field of safe, energy-efficient and eco-friendly buildings and infrastructure. Together with around 30,000 employees worldwide, we are helping to create a better future. We offer a unique combination of business areas: as a technology partner, service provider, system integrator and product supplier, we offer solutions and services relating to personal safety, building security and automation, heating, ventilation and air-conditioning technology, as well as energy management. Visit siemens.ch/jobs/bt for an insight into our organization, our products and services, the challenges we face, our vacancies and the opportunities open to you to start, change or advance your career at our Building Technologies Division.

Your new responsibilities

· Support of the agile development teams during the planning of security-relevant activities for cloud-based software products
· Coaching of teams during product & solution development (e.g. creation of requirements specifications, architecture and design, implementation, test cases and user documentation)
· Specification and maintenance of secure coding, secure design guidelines and configuration and hardening in a cloud environment
· Review of documents produced during the development and engineering processes (e.g. threat and risk analysis results, requirements specifications, architecture and design, test specifications and user documentation) regarding product & solution security
· Specification and maintenance of security requirements for projects. Support for meeting international and regional security standards and regulations
· Planning and performing threat and risk analysis and definition of countermeasures in line with risk acceptance criteria. Involvement in the analysis and handling of security vulnerabilities & incidents
· Clearance of implementation and documentation of security critical components (e.g. cryptographic functions, hidden functions and firewall settings)
· Verification of implementation regarding security requirements (e.g. as part of a system test, acceptance test)
· Validation, e.g. friendly hacking and penetration testing. Recommendation and creation of security testing tools

Your skills and experience

· Degree in Computer Science, Electrical Engineering or IT Security, Certified Information Systems Security Certification Programme (CISSP or CSSLP)
· Following experience is an advantage:
· Java, Spring, Maven, JQuery, Docker
· Experience with Authentication and Authorization mechanisms
· Continous Integration and Deployment as well as Security Automation
· Successful work as a software architect, experienced developer or security consultant
· A minimum 3 years’ experience in one of the professional experience fields
· Knowledge of security standards and regulations (e.g. ISO27001, SOC2, AICPA, IEC62443, , BSI Standards, etc. is an advantage)
· Experience with security topics and best practices in a major cloud platform (Amazon AWS)
· Good command of English and/or German

Good reasons to work at Siemens

We offer a huge number of national and international opportunities for development and a motivating, friendly working culture with good work-life balance thanks to flexible working models such as home-office and mobile working, generous holiday policies, paternity leave and sabbaticals, our women's network, a varied range of sports and a number of leisure clubs, as well as extensive benefits for junior and senior employees, mothers, fathers, single parents and those re-entering the workforce. Discover more reasons to join us at siemens.ch/jobs/why .

Your new workplace

· Zug site video

Contact us

We look forward to receiving youronline application including CV andletter of motivation withan indication of your availability. Please upload references andcertificatesin a second step after creating an account.If you have any questions about this position, please contact Carmen Costeniero, email .

Please note that we only accept applications via our job portal siemens.ch/jobs .

Information for recruitment agencies: Siemens does not accept recruitment agency applications for this position. Thank you for your understanding.