Siemens

Automation, digitalization, and smart infrastructure provider

Engineering Cybersecurity Specialist - Rail Signalling

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeTres Cantos, SpainNo salary listed

About the Job

Requirements

A degree in Telecommunications, Computer Science, Industrial Engineering, Cybersecurity, or equivalent practical expertise.
Typically 3 or more years of experience in cybersecurity engineering, operational technology security, or systems engineering within critical infrastructure.
A deep understanding of defence-in-depth, network segmentation, vulnerability management, and secure system integration.
Ability to balance cybersecurity objectives with railway operations' safety, legacy, and lifecycle constraints.
Fluency in English at C1 level.
Willingness to travel internationally when required.

Responsibilities

Provide support to commercial and bid teams as needed while primarily focusing on project execution, including analysing opportunities and customer specifications, identifying cybersecurity needs and risks, and contributing to preliminary proposals aligned with tender requirements and Siemens’ technological approach.
Prepare, maintain, and implement project-specific Cybersecurity Management Plans, applying and tailoring the principles, processes, and technical guidance of the IEC 62443 series, CENELEC TS 50701, and IEC 63452 as applicable.
Perform or contribute to Threat and Risk Analysis based on project architecture, operational context, applicable requirements, and identified threats and vulnerabilities, and maintain the analysis throughout the project lifecycle.
Collect and analyse cybersecurity requirements from customer specifications, applicable standards and regulations in project countries, and Siemens’ internal policies and requirements.
Harmonise inputs into a coherent, traceable, and technically feasible set of requirements; allocate them to systems, subsystems, components, suppliers, and partners; and incorporate them into the solution delivered to the customer.
Work with customer and Siemens stakeholders to reconcile priorities, resolve gaps or conflicts, and align customer cybersecurity expectations with Siemens’ technological proposal.
Contribute to system and solution architecture by defining and implementing security controls and defence-in-depth concepts, including zones and conduits, network segmentation, hardening, access control, physical security considerations, and secure configuration standards.
Support the selection and secure integration of Siemens and third-party products, technologies, suppliers, customer-specific mechanisms, and shared infrastructure services.
Address operational security capabilities such as intrusion detection, security monitoring, malware protection, vulnerability management, and security patch management while considering safety, availability, and lifecycle constraints.
Act as the cybersecurity interface for project management, system and subsystem engineering, research and development, testing, installation, suppliers, partners, and customers; provide clear guidance and support security-related decisions.
Plan, coordinate, and support cybersecurity verification and validation, including security requirement verification, vulnerability assessments, and penetration testing; evaluate findings against Threat and Risk Analysis; and define or follow up corrective and risk-mitigation actions.
Support installation, commissioning, operation, maintenance, and cybersecurity handover by providing guidance and awareness, and communicating relevant documentation, residual risks, operational measures, and responsibilities.
Monitor and follow up security vulnerabilities and incidents affecting the system or project, coordinating their assessment, treatment, documentation, and communication with appropriate stakeholders.

Desired Qualifications

Specific experience in railway signalling systems.
Familiarity with the Cyber Resilience Act or NIST frameworks.
Relevant cybersecurity certifications, particularly those focused on Industrial or Operational Technology security.

Defend the critical technology that keeps the world moving safely.

For over 160 years, Siemens Mobility has been a global leader, innovating transportation solutions that move the world. We lead the way in Rolling Stock, Rail Automation & Electrification, Turnkey Systems, Intelligent Traffic Systems, and comprehensive Related Services. Through digitalization, we empower operators worldwide to create intelligent infrastructure, enhance passenger experience, and ensure unparalleled availability. Join us in transforming Mobility Management, Turnkey Projects, Electrification, Mainline & Urban Transport, and Customer Services. If you're ready to make a real impact on a more connected and sustainable future, your journey starts here.

Your mission in our team As an Engineering Cybersecurity Specialist, you will protect the operational technology (OT) and industrial systems that drive global railway infrastructure. You will coordinate cybersecurity across the entire project lifecycle, ensuring our signalling solutions are secure by design while balancing safety, high availability, and operational continuity.

You’ll make a difference by

•Provide support to commercial and bid teams when required, while remaining primarily focused on project execution. This includes analysing opportunities and customer specifications, identifying key cybersecurity needs and risks, and contributing to preliminary proposals aligned with tender requirements and Siemens’ technological approach.

•Prepare, maintain, and implement the project-specific Cybersecurity Management Plan, applying and tailoring the principles, processes, and technical guidance of the IEC 62443 series, CENELEC TS 50701, and IEC 63452, as applicable.

•Perform or contribute to the Threat and Risk Analysis based on the project architecture, operational context, applicable requirements, and identified threats and vulnerabilities, and maintain it throughout the project lifecycle.

•Collect and analyse cybersecurity requirements originating from customer specifications, applicable standards and regulations in the countries where projects are delivered, and Siemens’ internal policies and requirements.

•Harmonise these inputs into a coherent, traceable, and technically feasible set of requirements, allocate them to systems, subsystems, components, suppliers, and partners, and incorporate them into the solution delivered to the customer.

•Work with customer and Siemens stakeholders to reconcile priorities, resolve gaps or conflicts, and align the final customer’s cybersecurity expectations with Siemens’ technological proposal.

•Contribute to system and solution architecture, defining and implementing appropriate security controls and defence-in-depth concepts, including zones and conduits, network segmentation, hardening, access control, physical security considerations, and secure configuration standards.

•Support the selection and secure integration of Siemens and third-party products, technologies, suppliers, customer-specific mechanisms, and shared infrastructure services.

•Address operational security capabilities such as intrusion detection, security monitoring, malware protection, vulnerability management, and security patch management, considering safety, availability, and lifecycle constraints.

•Act as the cybersecurity interface for project management, system and subsystem engineering, R&D, testing, installation, suppliers, partners, and customers, providing clear guidance and supporting security-related decisions.

•Plan, coordinate, and support cybersecurity verification and validation activities—including security requirement verification, vulnerability assessments, and penetration testing—evaluate findings against the Threat and Risk Analysis, and define or follow up corrective and risk-mitigation actions.

•Support installation, commissioning, operation, maintenance, and cybersecurity handover by providing guidance and awareness, and by clearly communicating relevant documentation, residual risks, operational measures, and responsibilities.

•Monitor and follow up security vulnerabilities and incidents affecting the system or project, coordinating their assessment, treatment, documentation, and communication with the appropriate stakeholders.

Your success is grounded in

A Degree in Telecommunications, Computer Science, Industrial Engineering, Cybersecurity, or equivalent practical expertise.
Solid experience (typically 3+ years) in cybersecurity engineering, OT security, or system engineering within critical infrastructure.
A deep understanding of defence-in-depth, network segmentation, vulnerability management, and secure system integration.
The ability to balance strict cybersecurity objectives with the safety, legacy, and lifecycle constraints of railway operations.
A proactive, analytical mindset with the ability to take ownership of complex challenges and communicate solutions clearly.
Fluency in English (C1) and the willingness to travel internationally when required.

You’ll thrive even more if you also bring

Specific experience in railway signalling systems and familiarity with the Cyber Resilience Act (CRA) or NIST frameworks.

Relevant cybersecurity certifications, particularly focused on Industrial or Operational Technology (OT) security.

Even if you don't meet every single requirement, we encourage you to apply! We value potential, eagerness to learn, and diverse backgrounds.

What you can expect when joining

You will be part of a team driving digital innovation, sustainability, and positive social impact through customer-oriented solutions.

An inclusive environment where you can be your authentic self and truly belong, supported by dedicated teams and DEI learning resources.

A hybrid work model that gives you the best of both worlds: the energy of in-person collaboration and the flexibility of remote work.

A culture that values curiosity and guarantees continuous learning, offering personal and professional development opportunities for everyone.

If we all thought the same, we would never think of anything new! That’s why we recruit great minds from all walks of life. We recognise that building a diverse workforce is essential to the success of our business, therefore we encourage applications from a diverse talent pool. We welcome the opportunity to discuss flexibility requirements with our applicants to encourage agile working and innovation. Flexibility is our main benefit. We combine remote and presence work because work-life balance and wellbeing are essential for our teams. We are convinced that stay at home allow us to focus on activities that need more time for concentration and being at the office enhance our creativity collaborating and learning from others.

Siemens aboga por la igualdad de oportunidades entre mujeres y hombres, así como en la Diversidad como fuente de creatividad e innovación. Contar con diferentes tipos de talento y de experiencias nos hace ser más competitivos y estar mejor preparados para responder con éxito a las demandas de la Sociedad. Por ello, valoramos a las candidatas y a los candidatos que reflejen la Diversidad que disfrutamos en nuestra Compañía y animamos la cobertura de puestos por mujeres y hombres en ocupaciones que se encuentren subrepresentadas.

Join us and let's shape the future of mobility together! Apply now.

#LI-ES1

About the Company

Siemens

Automation, digitalization, and smart infrastructure provider

Siemens is a global engineering and technology company focused on automation, digitalization, smart infrastructure, and mobility. Its products and solutions span industrial automation systems, electrical equipment, energy management, and digital services that help industries run more efficiently. The company’s core technology comes from its history of electrical generation and distribution, including the dynamo-electric principle, and it now sells hardware, software, and services that connect factories, buildings, grids, and transportation networks. Siemens differentiates itself through scale, a broad portfolio across the value chain, and a long track record of large-scale, multi-country projects in infrastructure and industry. Its goal is to enable smarter, more sustainable industrial processes and urban systems by integrating hardware, software, and digital services to improve productivity, energy efficiency, and mobility.

Company size: 10,001+
Company stage: IPO
Headquarters: Munich, Germany
Founded: 1847

Recently Posted Jobs

Explore more opportunities at Siemens

See more jobs