Penetration Tester

Doyou want to help create the future of healthcare? Siemens Healthineers is aplace for people who dedicate their energy and passion to this greater cause.It reflects their pioneering spirit combined with our long history ofengineering in the ever-evolving healthcare industry.

Weoffer you a flexible and dynamic environment where you have the space tostretch beyond your comfort zone in order to grow personally andprofessionally. Sound interesting?

Thencome in and join our team as Penetration Tester -Offensive Security Specialist

Your missionand responsibilities:

You conduct continuous penetration tests within the company to identify vulnerabilities and weaknesses. You prioritize and define the offensive activities being Business impact oriented.

Task andresponsibilities:

Understand the purpose of the assets to be pentested, learning the relevance to the Business, and helping to identify the worst case scenarios to focus on their exploitation. Execution of the Penetration test activities, registering all the conducted actions, and following trendy TTPs that real attackers are abusing on the wild. Documentation of the results of the Penetration test activities, including technical documentation. Support, on demand, to the penetration testing lead on organizing, following up and reporting Pentest related activities. Creation and maintenance of offensive-related toolset, including applications and underlying infrastructure. Automation of offensive-related scans, including detection, exploitation and reporting. Support to the IT administrators on explaining the exploitation of findings, as well as proposing recommendations and best practices for remediation. Support, on demand, to Red Team activities.

Qualifications:

You have 5+ years of relevant work experience in Offensive cybersecurity, i.e. penetration testing or red teaming. You hold relevant Industry Certifications such as OSCP, GPEN, Pentest+, etc. You have advanced English and communication skills: clear and concise communication; able to address stakeholders of different backgrounds and technical expertise. You have deep knowledge regarding infrastructure solutions, cloud technologies, network solutions and web technologies. You are knowledgeable of security frameworks and methodologies for example: MITRE ATT&CK, Cyber Kill Chain, OWASP, NIST, etc.

Additionally

You are analytical and work methodically. You enjoy self-learning and like staying aware of new trends, technologies and tools. You work or have been worked in globally distributed teams. You are a quick learner and have the aptitude to get into new technologies and architectures.

Being part ofour team:

Our globalteam: Siemens Healthineers is a leading global medical technology company. 55,000dedicated colleagues in over 70 countries are driven to shape the future ofhealthcare. An estimated 5 million patients across the globe benefit every dayfrom our innovative technologies and services in the areas of diagnostic andtherapeutic imaging, laboratory diagnostics and molecular medicine, as well asdigital health and enterprise services.

Curious aboutour culture? Our culture embraces different perspectives, open debate, and the will tochallenge convention. Change is a constant aspect of our work. We aspire tolead the change in our industry rather than just react to it. That’s why weinvite you to take on new challenges, test your ideas, and celebrate success.

As an equal-opportunity employer we are happy to considerapplications from individuals with disabilities.

La diversidad enSiemens Healthineers es nuestra fuente de creatividad einnovación.  Estamosplenamente comprometidos con el principio de igualdad de trato y deoportunidades entre mujeres y hombres . Contar con diferentes tipos de talento -independientemente de su raza,religión, género, orientación sexual, edad, discapacidad o cualquier otracaracterística indicada en la legislación vigente- nos hace ser máscompetitivos y estar mejor preparados para responder con éxito a las demandasde la sociedad.

#LI-AV1

---