Penetration Tester

Siemens Mobility is a separately managed company of Siemens. As a leader in transport solutions for more than 160 years, Siemens Mobility is constantly innovating its portfolio in its core areas of rolling stock, rail automation and electrification, turnkey systems, intelligent traffic systems as well as related services. With digitalization, Siemens Mobility is enabling mobility operators worldwide to make infrastructure intelligent, increase value sustainably over the entire lifecycle, enhance passenger experience and guarantee availability.

We put people first: we live up to a culture of team spirit, trust and mutual respect, valuing ambition and empowerment. Our culture celebrates diversity and inclusion, reflecting society with various backgrounds, nationalities, expertise, and mindsets. At Siemens Mobility, you will find the trust and freedom to excel and to create a better tomorrow with us. We are a focused technology company, with technology that addresses real problems that affect the future of humanity, combining the real and digital worlds and creating a truly global impact.

We are looking for a motivated and dedicated Penetration tester / Ethical Hacker to join our team of cyber security experts in the Mobility sector.

**This is a unique opportunity for a technical, hands-on person to grow with the business and play a pivotal role in the growth and leadership of the team.**

Professional skills:
3+ years of experience in an offensive security specialty.
- Ability to clearly communicate, present and report technical topics.
- Good analytical and problem-solving skills.
- Windows, Linux and MacOS knowledge.
- Passion for learning.
- Team player with ability to work independently.
- Advanced interpersonal, verbal and written communications skills.
- Ability to multitask, manage time effectively and prioritize tasks.
- Self-motivated and creative.

An expert level of knowledge is required in the following areas:
Port scanners, vulnerability scanners, exploitation frameworks (Nmap, Nessus...).
- Manual exploitation of public vulnerabilities.
- Networking and network protocols.
- Enumeration techniques.
- Active Directory.
- Windows and Linux access controls and administration.

A good understanding of the following concepts:
Threat modeling and risk assessment.
- Penetration testing processes, procedures, and reporting requirements.
- Post exploitation techniques.

Nice to have:
Certifications such as OSCP, OSCE, CRTP, CRTE, CRTO, etc.
- Programming skills (Python, C#, C/C++, Go, etc.).
- Cloud (Azure and AWS).
- Experience with databases (MS SQL, Oracle DB, PostgreSQL, MySQL).

**Language**:
Spanish native and English - B2 at least

LI-ES1