Agentic AI Security Specialist, Kitchener, ON
Change the future with us.
We are looking for dedicated and talented people who solve ever-changing challenges, customer needs, and questions from colleagues with clever concepts and creativity. We embrace change and work with curious minds re-inventing the future of work. Join us and let us focus together on what’s truly important: making lives better with new ideas and the latest technology around the world.
About the role: Agentic AI Security Specialist
We are seeking an Agentic AI Security Specialist to join Siemens Digital Industries Operations Software at our AI hub in Canada.
You own the security of a product in which software agents read industrial data, consult digital twins, and, within granted authority, act on production systems. Trust is the product's core promise and you make sure that the product can live up to that promise.
The role covers two workstreams with one underlying discipline: keeping autonomous agents contained. First, you are responsible for the security of our own AI-first development: our coding agents work in sandboxes with real tools and real credentials, and no agent may break out, exfiltrate data, or cause damage; our development and demonstration environments must never expose customer data. Second, you are responsible for the security of the product itself: customer agents must remain securely confined to their granted scope, skills must not be able to cause harm beyond their declared effect, and the guardrails must be able to deliver their full protective effect under attack and under failure. The development environment and the customer product are operated separately, but the mechanisms that keep an agent inside its boundaries are the same, and you own them in both.
You hold the full product security mandate: threat models, identity and permission architecture, enforcement at the point where an agent calls a tool or triggers an action, isolation of execution environments, secure supply chain, and security analytics over the traffic the platform generates. You work closely with the data and memory engineer, whose pipelines carry the signals you analyze, with the runtime lead, whose execution model you constrain, with the developer platform engineer, whose sandboxes you harden, and with the governance owners in Europe, who define what the product may do. You are not a compliance function and not a reviewer at the end of the line; you design the mechanisms and verify that they hold.
About Siemens Digital Industries Operations Software: It is a suite of integrated digital solutions to engineer, simulate and operate manufacturing operations across industries. Operations Software includes our product portfolio in manufacturing engineering (COMOS, Tecnomatix, NX CAM, ...) & production operations (Win CC, Scada, PCS 7 / neo, Opcenter, Insights Hub, ...). The portfolio helps organizations across many different industries to improve operational efficiency, reduce costs, and enhance decision-making by providing real-time visibility and control across manufacturing and business processes.
Formula 1 cars, ships, mobile phones, space exploration vehicles, food & beverages, pharmaceuticals and many of the other objects we see in our daily lives are being conceived and produced using our software.
We're redefining the industrial world using data and AI to make production: Agile, Adaptive, Autonomous. Eliminate productivity boundaries for today’s and tomorrow’s production operation. Join our mission to build the most comprehensive next generation AI-native Industrial Operations Software portfolio as the new operation system for industry in the age of AI. With us you have the chance to now apply AI to where it really matters: In the physical world of an industrial production and engineering of real things.
As part of Siemens Operations Software (OPS-SW), the Technology, Data Fabric & Agentic AI organization provides the technology foundation that enables the next generation of industrial software. Its portfolio includes AI Production & Engineering Systems, Data Fabric, Agentic AI frameworks, connectivity platforms, semantic data models, cloud-native architectures, and industrial AI services that power autonomous, scalable, and intelligent operations across the OPS-SW portfolio.
What will you do?
- Design and implement agent containment for both internal AI-first development and the customer product, covering sandbox isolation, network access, credentials, and resource limits.
- Define identity, delegation, and authorization mechanisms that restrict agents and skills to approved data, tools, and actions, together with the runtime and skill engine teams.
- Protect tenant boundaries and sensitive data across runtime, memory, traces, and development playgrounds, preventing unauthorized access and customer-data exposure.
- Build and test defenses against prompt injection, tool misuse, data exfiltration, and privilege escalation; verify that guardrails and revocation mechanisms remain effective under attack and component failure.
- Develop security analytics across model traffic, tool calls, and agent actions to detect misuse and support containment and investigation.
- Integrate security checks into both CI/CD and the product’s assessment workflow, collaborating with Verification Engineering on functional and security findings.
- Maintain threat models and translate relevant regulatory and customer requirements into technical controls, coordinating independent security reviews with qualified specialists.
- Work AI-first: use coding agents for security engineering while retaining responsibility for design, verification, and security judgment.
What you will bring?
- Degree in computer science, security engineering, or a related field, or equivalent experience.
- 6+ years in product or application security with hands-on engineering: you have designed and implemented security mechanisms, not only audited them.
- Deep experience with identity and access management, authorization models, and secrets management in cloud-native and on-premises environments.
- Practical understanding of LLM-based systems and their specific attack surface: prompt injection, tool abuse, indirect injection through data, and privilege escalation through agent chains.
- Experience with sandboxing and workload isolation: container security, network policy, syscall and filesystem restriction, and the ways each of them fails.
- Experience securing CI/CD pipelines and developer tooling, where the attacker may be an automated process with legitimate credentials.
- Experience with threat modeling, security architecture review, and translating threats into testable controls.
- Solid Python and familiarity with Kubernetes and secure supply chain practices.
- The ability to argue for a control with evidence and to accept a residual risk explicitly rather than implicitly.
What sets you apart
- Experience securing industrial or OT-adjacent systems and familiarity with IEC 62443 or comparable standards.
- Experience with security analytics, SIEM integration, or detection engineering.
- Published work, open-source contributions, or conference talks on LLM or agent security.
- Experience with the EU AI Act or comparable regulatory frameworks for AI systems.
- Exposure to the NVIDIA AI stack, in particular NeMo Guardrails, and an informed view on what it does and does not protect.
- Experience red-teaming agent systems or coding agents.
- Comfortable working with distributed teams across time zones and communicating asynchronously by default.
Salary is commensurate with experience, and ranges between $ 100,000 CAD - $ 150,000 CAD, excluding bonus and benefits. In addition to base salary, this role includes eligibility for an annual discretionary bonus of 10%.
Why you’ll love working for Siemens!
Join our Digital World
At Siemens Digital Industries Operations Software, flexibility is how we work – hybrid, built on trust and autonomy. We build technology that shapes the real world. You'll grow through real projects, strong technical peers, and global mobility, backed by the scale and benefits of an industrial operations software leader. We're committed to equality and inclusion, and we hire based on merit, skills, and impact. Bring your curiosity and creativity and help us shape tomorrow!
Our Benefits & Rewards
The actual compensation offered is based on the successful candidate's job-related skills, experience, and relevant education/training. Siemens offers a wide range of health and wellness benefits to employees
Our Commitment to Equity and Inclusion
We value equal opportunities and welcome applications from people with disabilities. At Siemens, we believe people who've had real experiences dealing with being different will excel as leaders. Let's foster a culture of creativity and innovation. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Siemens is proud to be an eight-time award winner of Canada’s Top 100 Employers, Canada’s Greenest Employers 2025 and Canada’s Top Employers for Young People 2025.
About us.
We share our ideas and champion the people behind them.
Siemens Canada is a leading technology company focused on industry, infrastructure, mobility and healthcare. The company’s purpose is to create technology with purpose, transforming the everyday, for everyone, since 1912. By combining the real and the digital worlds, Siemens empowers its customers to accelerate their digital and sustainability transformations, making factories more efficient, cities more liveable, and transportation more sustainable. Siemens also owns a majority stake in the publicly listed company Siemens Healthineers, a leading global medical technology provider pioneering breakthroughs in healthcare. For everyone. Everywhere. Sustainably.
In fiscal 2024, which ended September 30, 2024, Siemens Canada had revenues of approx. $2.2 billion CAD. The company has approximately 4,400 employees from coast-to-coast and 37 office and production facilities across Canada.
To learn more about Siemens Canada, visit our website at www.siemens.ca
While we appreciate all applications we receive, we advise that only candidates under consideration will be contacted.
#OneOpsSW #LI-Hybrid
Siemens is committed to creating a diverse
environment and is proud to be an equal opportunity employer. Upon request,
Siemens Canada will provide reasonable accommodation for disabilities to
support participation of candidates in all aspects of the recruitment process.
All qualified applicants will receive consideration for employment.
By submitting personal information to Siemens Canada Limited or its
affiliates, service providers and agents, you consent to our collection, use
and disclosure of such information for the purposes described in our Privacy
Notice available at www.siemens.ca.
En transmettant des renseignements personnels à Siemens Canada limitée ou à ses sociétés affiliées, à ses fournisseurs de services ou à ses agents, vous nous autorisez à recueillir, à utiliser et à divulguer ces renseignements aux fins prévues dans notre Déclaration de protection de la confidentialité, que vous pouvez consulter au www.siemens.ca.