Product and Solution Security Expert - Pune, India - Siemens Mobility

Siemens Mobility

Verified Company

Pune, India

2 weeks ago

Posted by:

Deepika Kaur

beBee Recuiter

Description

Job ID:

Company:

Siemens Technology and Services Private Limited
Organization:
Advanta
Job Family:
Cybersecurity
Experience Level:
Experienced Professional
Full Time / Part Time:
Fulltime
Remote vs Office:
Office/Site only
Contract Type:
PermanentWe spend 90 percent of our lives in buildings. It follows that the buildings where we spend our lives have an enormous impact on our lives. On what we do, how we feel, who we are, who we become. At Siemens, we believe that everything people do in life deserves a magnificent place to do it. A detailed place to learn.

Building Technology is an in-house global competence center for software engineering. We work closely with the Siemens Divisions to engineer creative products and services across the world.

Our team of over 3,000 professionals forms a meaningful part of the global network of about 17,500 software guides within Siemens.

In India, we have offices in Bengaluru, Chennai, Gurgaon, Noida, and Pune.

This Role is Primarily for Pune Location.

We don't need superheroes, just super minds.
-

PSSE:
Professional & Expert category
:

Experience Range
6 to 9 years.
Define Regulations & Support Implementation:
Support of the project leader during the planning of security relevant activities in the project
Support the project leader to build up required competencies for product & solution security within the project team.
Coaching of project teams during product & solution development (e.g., creation of requirements specifications, architecture and design, implementations, test cases, user documentation)
Specification and maintenance of secure coding, secure design guidelines
Synchronize adequately with Information Security organization to ensure that the development, and integration ITinfrastructure is sufficiently secure (e.g., to ensure confidentiality, integrity or availability of source code, binaries and configuration).
Review of documents produced during the development process (e.g., threat and risk analysis results, requirements specification, architecture and design, test specification, user documentation) regarding product & solution security.

Guide Technological Aspects.

Planning and performing threat and risk analysis (TRA) and definition of countermeasures in line with risk acceptance criteria of organization
Evaluation of thirdparty components regarding product & solution security
Clearance of implementation and documentation of security critical components (e.g. cryptographic functions, hidden function, firewall settings)
Perform code analysis to identify security vulnerabilities and check compliance with secure coding guidelines. This includes recommendation and creation of static code analysis tools.
Verification of implementation regarding security requirements (e.g., as part of system test, factory or site acceptance test). This includes recommendation and creation of security testing tools.
Validation (e.g., friendly hacking, penetration testing) to ensure that implementation fulfills security expectations of customers. This includes recommendation creation of security testing tools.
Involvement in the analysis and handling of security vulnerabilities & incidents

Support Communication:

Exchange experiences with internal and external product & solution security community and monitor standards and trends.
Contact person for product management (e.g., during contract negotiation) for security topics.
Support for communication with customer (e.g., securityrelevant information and available security updates).
Demonstrates and engages to go beyond short term execution mindset towards long term implications of work.
Builds trust and helps the customer to choose between solutions best suited by demonstrating indepth understanding of customer needs and issues.
Encourages collaborative decision making within the team.
Provides taskoriented support.
Good time management and communication skills.

Measure & Report:

Good time management and communication skills.
Participate in release of products or solutions from PSS standpoint (e.g., at certain milestones or quality gates)
Collection of product & solution security related lessons learned and feed into continuous improvement activities (e.g., update of guidelines, reporting to PSSOs, integration in awareness material).

Make your mark in our exciting world at Siemens.
This role is primarily based at Pune. However, you may get the opportunity to visit other locations within India as and when the work demands.

We've got quite a lot to offer. How about you?