> Markdown version of [/jobs/ext/387549-senior-cybersecurity-incident-responder](https://www.wearedevelopers.com/jobs/ext/387549-senior-cybersecurity-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cybersecurity Incident Responder

- **Company:** Siemens AG
- **Location:** Erlangen, Germany
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Network Analysis, Cyber Security, Linux, Software Vulnerability Management, Cloud Platform System, Information Technology, Cybercrime, Web Technologies
- **Published:** June 11, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=72029c31d5958e75

## About the Role

Do you have experience in Windows?, + University degree (MA) in Information technology, Engineering or a related field

 + Clean track record and willingness to comply if a security clearance becomes necessary (especially Ü2).
 * Experience & Skills
*

 + Significant work experience (>7 years) in Incident Response, including handling complex incidents in enterprise and cloud environments; experience in IT Forensics or Vulnerability Management is a plus
 + Strong technical expertise in IT security across several of the following areas: Linux and Windows operating systems, web technologies (e.g. encryption, HTTP, REST), networking, and cloud environments
 + Solid understanding of both technical and organizational aspects of information security, e.g. through prior defensive or offensive security experience
 + Experience with fundamental attack techniques, tools, and methodologies, as well as a strong understanding of attacker behavior
 + Excellent understanding of current cyber threats and vulnerabilities, including the ability to identify, triage, and support remediation of security incidents based on threat intelligence, log data, and network analysis
 + Experience in incident documentation and reporting, ideally in environments with regulatory or compliance-related requirements
 + Strong analytical skills with the ability to collect, structure, and interpret large amounts of information with high attention to detail and accuracy
 + Strong interpersonal and communication skills, with the ability to interact effectively with technical and non-technical stakeholders, including senior management and external parties
 + Ability to operate in complex stakeholder environments and act as a reliable interface in high-pressure situations
 * Ways of working: analytical, problem-solving attitude with strong decision-making abilities and a growth mindset
 * Languages: business proficiency in German and English, including security-related terminology

## Description

* Investigate and follow through on IT security incidents in a geographically distributed environment, considering all relevant technical and non-technical stakeholders during all phases of the incident.
 * Analyze reports about potential / suspected incidents, collect and analyze technical incident information and log data, generate reports, and ensure progress on incident tickets.
 * Act as a central point of contact for incident-related communication in Germany, including coordination with internal stakeholders as well as external parties such as regulators, authorities, and law enforcement.
 * Coordinate incident response activities with local business units, ensuring alignment with global CERT processes.
 * Actively shape and continuously enhance CERT's internal toolset by contributing innovative ideas for new functionalities and features.
 * Report to and advise management and other stakeholders to improve and drive Siemens' Cybersecurity posture. Doing so, you will balance level of detail and strategic insight presented on a case-by-case basis


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Agile work at CARIAD – Creating a customer web application for controlling the vehicle ](https://www.wearedevelopers.com/videos/200-agile-work-at-cariad-creating-a-customer-web-application-for-controlling-the-vehicle)

## Related Articles

- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)