Remediation Engineer – Cybersecurity Operations

Dear Aspirant!

We empower our people to stay resilient and relevant in a constantly changing world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make a great addition to our vibrant international team.

We are looking for: Cybersecurity Professional - Remediation Engineer – Cybersecurity Operations

You’ll make an impact by:

• Perform standard server patching and security updates in accordance with approved change and maintenance procedures.
• Execute workstation remediation activities including operating system updates, software updates, hardening, and security configuration changes.
• Remediate vulnerabilities identified through enterprise vulnerability scans and security assessments.
• Perform configuration corrections based on approved security baselines and vulnerability remediation guidance.
• Support antivirus/EDR remediation activities, including agent health, policy compliance, detection remediation, and security tool recovery.
• Coordinate vulnerability rescans following remediation and investigate findings that remain open.
• Perform validation testing to confirm that vulnerabilities and security configuration gaps have been successfully remediated.
• Maintain accurate technical documentation of remediation activities, implementation evidence, and validation results.
• Coordinate with asset owners and infrastructure/application teams when remediation requires downtime, application changes, or vendor support.
• Support exception and risk acceptance workflows when remediation cannot be completed within defined timelines.
• Identify recurring technical remediation challenges and recommend standard fixes, automation, or hardening improvements.
• Validate remediation through appropriate OT-safe testing, rescanning, configuration verification, and evidence collection without adversely affecting operational processes.
• Apply compensating controls such as network segmentation, access restrictions, service hardening, application allowlisting, monitoring, or configuration changes when direct patching is not feasible.
• Plan and execute OT security remediation in coordination with operations, engineering, asset owners, and vendors, ensuring that changes are performed within approved maintenance windows.
• Perform vulnerability remediation across IT and OT environments, including SCADA, substations, utility systems, HMI, PLC, RTU, DCS, servers, and supporting infrastructure..

Use your skills to move the world forward!

• B.E./B.Tech./MCA/M.Sc. in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 6–8 years of experience in infrastructure security, system administration, vulnerability remediation, or cybersecurity operations.
• Hands-on OT/ICS experience with SCADA, substations, utilities, HMI, PLC, RTU, DCS, industrial control systems, or similar environments.
• Understanding of OT patching and remediation constraints, including vendor qualification, maintenance windows, system availability, safety considerations, legacy operating systems, and change management.
• Knowledge of industrial networking and protocols such as IEC 61850, Modbus, DNP3, OPC/OPC UA, PROFINET, Ethernet/IP, or similar is desirable.
• Experience applying IEC 62443 principles and OT hardening practices is preferred.
• Strong hands-on experience with server, workstation, and infrastructure remediation.
• Good knowledge of Windows and Linux administration, patching, configuration management, and hardening.
• Experience with vulnerability remediation based on CVE/CVSS findings and scanner recommendations.
• Working knowledge of endpoint security, antivirus/EDR platforms, and security agent troubleshooting.
• Experience with vulnerability scanners such as Tenable, Qualys, Wiz, Rapid7, or equivalent.
• Knowledge of networking, TLS, authentication, system services, databases, and common enterprise infrastructure components.
• Ability to perform technical troubleshooting and root-cause analysis for persistent vulnerabilities.
• Experience with scripting/automation using PowerShell, Python, Bash, or similar is desirable.
• Strong change management, documentation, and stakeholder coordination skills.
• Hands-on enterprise experience with patching, hardening, vulnerability remediation, and validation.
• Certifications such as Microsoft, Linux, Security+, CEH, GIAC, or equivalent are preferred.
• Preferred Certifications:
• Microsoft, Linux, Security+, CEH, GIAC, or equivalent infrastructure/security certifications.
• Key interfaces:
• Asset Owners | Infrastructure | Application Teams | Vulnerability Management | SOC | Vendors.

Create a better #TomorrowWithUs!

This role is based in Chennai, where you’ll get the chance to work with teams impacting entire cities, countries - and the shape of things to come.

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us.

We’re Siemens. A collection of over 312,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and imagination and help us shape tomorrow.

Find out more about Siemens careers at: www.siemens.com/careers

Find out more about the Digital world of Siemens here: www.siemens.com/careers/digitalminds