Job ID: Location: Tres Cantos, Madrid, SpainCompany: SiemensPara presentar una candidatura, simplemente lea la siguiente descripción del puesto y asegúrese de adjuntar los documentos pertinentes.
Engineering Cybersecurity Specialist - Rail Signalling Job ID Posted since 15-Oct-** Organization Mobility Field of work Engineering Company SIEMENS MOBILITY, S.L.U. Experience level Mid-level Professional Job type Full-time Work mode Office/Site only Employment type Permanent Location(s) Tres Cantos - Madrid - Spain Defend the critical technology that keeps the world moving safely.For over 160 years, Siemens Mobility has been a general leader, innovating transportation solutions that move the world.
We lead the way in Rolling Stock, Rail Automation & Electrification, Turnkey Systems, Intelligent Traffic Systems, and comprehensive Related Services.
Through digitalization, we empower operators worldwide to create intelligent infrastructure, enhance passenger experience, and ensure unparalleled availability.
Join us in transforming Mobility Management, Turnkey Projects, Electrification, Mainline & Urban Transport, and Customer Services.
If you're ready to make a real impact on a more connected and sustainable future, your journey starts here.Your mission in our team As an Engineering Cybersecurity Specialist, you will protect the operational technology (OT) and industrial systems that drive global railway infrastructure.
You will coordinate cybersecurity across the entire project lifecycle, ensuring our signalling solutions are secure by design while balancing safety, high availability, and operational continuity.You'll make a difference by - Provide support to commercial and bid teams when required, while remaining primarily focused on project execution.




This includes analysing opportunities and customer specifications, identifying key cybersecurity needs and risks, and contributing to preliminary proposals aligned with tender requirements and Siemens' technological approach.
- Prepare, maintain, and implement the project-specific Cybersecurity Management Plan, applying and tailoring the principles, processes, and technical guidance of the IEC * series, CENELEC TS *, and IEC ***, as applicable.
- Perform or contribute to the Threat and Risk Analysis based on the project architecture, operational context, applicable requirements, and identified threats and vulnerabilities, and maintain it throughout the project lifecycle.
- Collect and analyse cybersecurity requirements originating from customer specifications, applicable standards and regulations in the countries where projects are delivered, and Siemens' internal policies and requirements.
- Harmonise these inputs into a coherent, traceable, and technically feasible set of requirements, allocate them to systems, subsystems, components, suppliers, and partners, and incorporate them into the solution delivered to the customer.
- Work with customer and Siemens stakeholders to reconcile priorities, resolve gaps or conflicts, and align the final customer's cybersecurity expectations with Siemens' technological proposal.
- Contribute to system and solution architecture,



defining and implementing appropriate security controls and defence-in-depth concepts, including zones and conduits, network segmentation, hardening, access control, physical security considerations, and secure configuration standards.
- Support the selection and secure integration of Siemens and third-party products, technologies, suppliers, customer-specific mechanisms, and shared infrastructure services.
- Address operational security capabilities such as intrusion detection, security monitoring, malware protection, vulnerability management, and security patch management, considering safety, availability, and lifecycle constraints.
- Act as the cybersecurity interface for project management, system and subsystem engineering, R&D;, testing, installation, suppliers, partners, and customers, providing clear guidance and supporting security-related decisions.
- Plan, coordinate, and support cybersecurity verification and validation activities—including security requirement verification, vulnerability assessments, and penetration testing—evaluate findings against the Threat and Risk Analysis, and define or follow up corrective and risk-mitigation actions.
- Support installation, commissioning, operation, maintenance, and cybersecurity handover by providing guidance and awareness, and by clearly communicating relevant documentation, residual risks, operational measures, and responsibilities.
- Monitor and follow up security vulnerabilities and incidents affecting the system or project, coordinating their assessment, treatment, documentation, and communication with the appropriate stakeholders.Your success is grounded inA Degree in Telecommunications, Computer Science, Industrial Engineering, Cybersecurity, or equ

📌 Engineering Cybersecurity Specialist (España)
🏢 Siemens
📍 España