Siemens CERT is a dedicated team of Security Engineers with the mission to secure the Siemens infrastructure. CERT also monitors the current Cyber Threat Landscape for Siemens and assesses its potential impact to the enterprise. Based on that know-how and the latest technological trends, it consults with the Information Technology departments in Siemens to improve the enterprise IT Security. The team also is responsible for coordinating the response to and forensic analysis of Cyber Security Incidents within Siemens and its customers.
**We are looking for a Digital Forensics Expert (M/F/d)**
**What are my responsibilities?**
- You forensically investigate and follow through on IT security incidents in geographically distributed environments, while considering all relevant technical and non-technical stakeholders during all phases of the incident
- You will be guided by documented processes and Key Experts, while you analyze evidence collected from potential / suspected incidents within Siemens or customer’s networks. Furthermore, you correlate and interpret technical evidence and log data, generate reports based on results and provide guidance on crucial next steps to drive incidents to a successful conclusion
- You help to improve our vast internal toolset by contributing new features and automation ideas; also, you implement parts of these improvements yourself by writing code
**What do I need to qualify for this job?**
- You have significant technical system expertise (e.g. gathered from being an IT administrator) with relevant exposure and expertise in IT security, in several of the following technologies: Linux and Windows operating systems, web-technologies (encryption, HTTP, REST), networking, cloud environments
- You possess the ability to excellently interact with both technical experts and non-technical staff in exceptional situations to ensure correct actions are taken and communication partners collaborate
- You have previously gained excellent working knowledge in at least two of the following forensic disciplines: host-based, network, cloud, OT, memory, mobile, forensic analysis
- You have knowledge of common commercial and open-source forensics tools like EnCase, plaso, volatility and similar
- You are familiar with automating basic tasks using a scripting language, preferably Python
- Previously, you've gained experience in reverse engineering malware samples; ideally including unpacking and evasion of common and more exotic anti-debugging techniques
- You have the ability to present and explain complex technical topics to both management and technical experts
- Furthermore, you are able to work in a self-guided and result-oriented fashion with the clear desire to become an acknowledged technical expert in your own area of expertise
- You are proficient in English on a conversation level, including security terminology; oral or written skills in German are a plus
**You may have knowledge or experience in some of the following areas**:
- Cloud Security
- DevOps (CI/CD pipelines, testing best practices, etc.)
What we offer.- 2 to 3 days of mobile working per week as a global standard
- Attractive remuneration package
- Development opportunities for both personal and professional growth
- 30 leave days and a variety of adaptable working models that allow time off for yourself and your family
- Share matching programs to become a shareholder of Siemens AG
- Find more benefits here
- Individual benefits are adapted to meet local legal regulations, the requirements of different job profiles, locations, and individual preferences._
**Make your mark in our exciting world at Siemens.**
***:
- if you would like to find out more about jobs & careers at Siemens.