Role Summary
Siemens Software is hiring a Cloud Security Engineer – SaaS Applications for our Simcenter X security organization in Chennai under a hybrid work model. In this role, you will join our international SecOps team as a security guardian, safeguarding our AWS-hosted cloud perimeter and SaaS engineering ecosystem. You will execute STRIDE threat modeling, conduct application penetration tests, analyze SAST/DAST automated vulnerability scans, automate security guardrails using Terraform and Python, and collaborate with engineering teams to enforce Security-by-Design and Zero Trust architectures.
Key Responsibilities
- Threat Modeling & Architecture Review: Lead structured threat modeling exercises (STRIDE) across cloud-native architectures, APIs, and microservices to define trust boundaries and enforce Security-by-Design principles.
- Vulnerability Management & Pen Testing: Triage, analyze, and remediate findings from SAST, DAST, and CSPM scanners; execute penetration testing across web applications and REST APIs against OWASP Top 10 benchmarks.
- Security Automation & IaC: Develop automated security verification scripts and policy-as-code checks using Python, Bash, and Terraform or AWS CloudFormation.
- Cloud Identity & Incident Response: Implement enterprise IAM policies, network segmentation (VPCs, firewalls), and encryption mechanisms, while supporting root-cause analysis (RCA) and containment for security incidents.
Key Qualifications
- Education: Bachelor's or Master's degree in Computer Science, Information Security, Electronics, or a related engineering field.
- Experience: 3 to 7 years of hands-on experience in cloud security engineering, application security, or SecOps within SaaS environments.
- Core Stack: Proven expertise securing AWS cloud environments, STRIDE threat modeling, IAM, vulnerability assessment (SAST/DAST), application pen testing, Python scripting, Terraform, and OWASP standards.
- Nice to Have: Cloud security certifications (AWS Certified Security – Specialty, CCSP, Security+); familiarity with CSPM tools, Azure/GCP security, and compliance frameworks (ISO 27001, GDPR).
- Professional Competencies: Strong analytical problem-solving, crisp technical reporting to executive stakeholders, and proactive collaboration with distributed engineering teams.
About Siemens Software
Siemens Software, a business unit of Siemens Digital Industries, is a global leader in software solutions driving digital transformation for manufacturers and enterprises worldwide.