Job ID: 487407 Posted since: 04-Dec-2025 Organization: Cybersecurity Field of work: Cybersecurity Company: Siemens AG Experience level: Experienced Professional Job type: Full-time Work mode: Hybrid (Remote/Office) Employment type: Permanent Location(s): Erlangen - Bayern - Germany, Lisbon - Lisboa - Portugal, Madrid - Madrid - Spain, Munich - Bayern - Germany Transform the everyday As Head of Cybersecurity Platforms, you will define technical direction, prioritize investments, lead a multi-disciplinary global team, and collaborate closely with the organization to ensure robust detection, response, threat intelligence, and product security capabilities across the company. What we offer you An environment where everyone can bring their whole self to work and feel a sense of belonging. A workplace that values curiosity and guarantees continuous learning, with development opportunities for both personal and professional growth. Share matching programs to become a shareholder of Siemens AG. A wide range of flexible benefits for you and your family to enjoy! Since each of over 300,000 team members feels that other benefits are particularly important, and we cannot list our entire benefit portfolio here, you can find more information here. The individual benefits are subject to regulatory, contractual, or corporate conditions. You’ll make an impact by Leadership & Strategy Lead and manage four global platforms teams: Cyber Defense Center, Threat Intelligence / CERT, Product CERT and Artificial Intelligence. Define and execute the strategic roadmap for cybersecurity platforms, including modernization, cloud transformation and automation. Drive reliability, scalability, and performance of core security platforms across hybrid and cloud environments. Ensure alignment with corporate cybersecurity, IT, product security, and regulatory frameworks. Cyber Defense Center (CDC) Oversee operations and engineering for critical detection and response platforms, including: SIEM: Elastic Security, Microsoft Sentinel. Ingestion & Processing: Kafka, Logstash Cloud & IaC: AWS, OpenTofu Configuration & Infrastructure: Puppet, VMware, Linux Monitoring: Xymon, Datadog. Endpoint Security: CrowdStrike, Microsoft Defender for Endpoint Ensure platform readiness for threat detection, incident response, and automation. Threat Intelligence (TI) Lead strategy and operations for TI platforms and workflows. Manage MISP and in-house intelligence applications (Docker / Linux / Django). Guide the migration from MISP to ThreatConnect (SaaS). Oversee deployment of Threat Connect Polarity into Eagle Openshift. Enhance intelligence automation, enrichment, and threat sharing. CERT (Computer Emergency Response Team) Oversee in-house CERT applications and tooling (Docker / Linux / Django). Maintain and evolve CYS IAM and drive its migration into Eagle Openshift. Support incident management tooling, case management, and workflow automation. Product CERT (PCERT) Lead cloud operations and security services for product security response. Manage AWS cloud infrastructure, IaC, CloudWatch, security operations, and compliance controls. Ensure scalable and compliant operations supporting product security vulnerability response. Cybersecurity Artificial Intelligence Oversee in-house ML fabric and maintain current Cyber Defense AI use cases. Lead strategic integration of Cybersecurity Artificial Intelligence technologies across all platforms. Define and execute the roadmap for AI-driven cybersecurity capabilities (AI for Security). This is how you'll win us over: Education: University degree in Computer Science, or a comparable discipline. Experience & Skills: 10 years in cybersecurity / IT leadership, platform management, or cybersecurity engineering. Proven experience with: AWS, Linux, IaC (OpenTofu/Terraform), Kubernetes/Openshift, Docker, and modern DevSecOps practices. Strong expertise in SIEM, cloud security, endpoint protection, threat intelligence, incident response, and platform engineering. Strong understanding of enterprise-scale detection engineering, security operations, and threat intelligence models. Experience leading multi-disciplinary global teams. Ways Of Working: Ability to define long-term strategy while ensuring operational excellence. Strong communication skills with executive stakeholders. Proven experience managing complex transformation programs. Ability to lead through influence, foster innovation, and grow technical leaders. Languages: business proficiency in English, German is preferable You are much more than your qualifications, and we believe in the potential of every single candidate. We look forward to getting to know you! Your individual personality and perspective are important to us. We create a working environment that reflects the diversity of the society and support you in your personal and professional development. Let’s get to know your authentic personality and create a better future together with us. As an equal-opportunity employer we are happy to consider applications from individuals with disabilities. In the case of equal qualifications, severely disabled applicants and applicants with equivalent status will be given preference. About us With its over 450 employees, Siemens Cybersecurity (CYS) works hand in hand with the company’s business units to ensure Siemens’ future. CYS operates its cybersecurity services together with internal and external partners, including industry-leading businesses, promising start-ups or we just do it ourselves! These collaborative endeavors focus on a wide range of future technologies with a view to securing them with our knowledge and operational excellence. In addition, CYS also provides consulting and development services for Siemens’ business units and supports them with methods and tools related to business excellence. We’ve got quite a lot to offer. How about you? Do you want to know more about Cybersecurity at Siemens? Cybersecurity www.siemens.de/careers – if you would like to find out more about jobs & careers at Siemens. FAQ – if you need further information on the application process.