> Markdown version of [/jobs/ext/3123492-cybersecurity-specialist-for-vulnerability-management](https://www.wearedevelopers.com/jobs/ext/3123492-cybersecurity-specialist-for-vulnerability-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Specialist for Vulnerability Management - **Company:** Siemens Energy - **Location:** Hamburg, Germany (Remote available) - **Contract:** Permanent contract - **Skills:** Burp Suite, CompTIA Security+, Cyber Security, Supervisory Control and Data Acquisition (SCADA), SonarQube, Software Vulnerability Management, Sonatype, Information Technology, Process Control Systems, Synopsys Black Duck, Nessus, Qualys, Static Application Security Testing, Vulnerability Analysis - **Published:** September 28, 2026 - **Apply:** https://www.arbeitsagentur.de/jobsuche/jobdetail/15170-432579707-S ## About the Role * A university degree in Cybersecurity, Information Technology, Computer Science, or a comparable field * Profound experience in cybersecurity, product security or OT security, preferebly in the energy sectore. Experience with widely recognized OT cybersecurity standards, including ISA/IEC 62443, NIST SP 800-82, and ISO 27001 is preferred. Experience with regulatory compliance requirements specific to OT environments (e.g., NIS2 NERC CIP, EU Cyber Resilience Act) is highly welcome. * Deep expertise in vulnerability management, including conducting assessments, performing security testing, and developing remediation strategies * Deep understanding of common security vulnerabilities, attack vectors, and exploitation techniques. Hands-on experience with industry-standard vulnerability scanning techniques and tools (e.g., Nessus, Qualys, Burp Suite, OWASP ZAP) * Familiarity with industry-standard SCA and SAST techniques and tools (BlackDuck, Snyk, SonarQube). Knowledge and experience with SCADA and Industrial Control Systems is preferred. * Fluency in English and excellent communication and interpersonal skills, with the ability to collaborate across functions and convey technical concepts to non-technical stakeholders * Relevant cybersecurity certifications such as CEH, OSCP, PNPT, GICSP, ISA/IEC 62443 Cybersecurity Expert are highly welcome. ## Description Our Industrial Cybersecurity department is seeking a highly qualified and driven industrial cybersecurity specialist to support vulnerability management efforts within the Product and Solutions domain. As an Industrial Cybersecurity Specialist, you will play a critical role in ensuring the security posture of wind power plants by proactively identifying and supporting the remediation of potential security risks. You will become part of the Industrial Cybersecurity Technical Competence Center (TCC), a diverse and international team of experienced cybersecurity professionals supporting the business and development teams in securing systems by default across Product and Solutions, Manufacturing IT and Business managed IT. In this role you will play a key role in supporting and enhancing the vulnerability management process to strengthen the security posture of company's products and solutions. How You'll Make an Impact * Driving and continuously improving the vulnerability management process. * Staying up to date with emerging security threats, vulnerabilities, and industry best practices to continuously improve our vulnerability management program. * Assessing identified vulnerabilities by analyzing their severity, exploitability, and relevance to our company's products and solutions. * Collaborating with cross-functional teams to define and implement effective remediation strategies and action plans. * Supporting the development of mitigation plans to address vulnerabilities by applying patches, implementing alternative safeguards, or facilitating risk acceptance decisions. * Advising stakeholders on security best practices and providing recommendations for effective vulnerability treatment. * Reporting on vulnerability findings, remediation efforts, and overall security posture to senior management and relevant stakeholders., Our Global Functions are essential in driving the company's strategic initiatives and ensuring operational excellence across various departments, business areas, and regions. These roles support our vision to become the most valued energy technology company in the world. As part of our team, you contribute to our vision by shaping the global energy transition, partnering with our internal and external stakeholders, and conducting business responsibly and in compliance with legal requirements and regulations. ## Related Videos - [Open sourcing a library: how hard can that be?](https://www.wearedevelopers.com/videos/1058-open-sourcing-a-library-how-hard-can-that-be) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cybersecurity for Software Defined Vehicles](https://www.wearedevelopers.com/videos/725-cybersecurity-for-software-defined-vehicles) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)