Product & Solution Security Expert 80-100%

Together with our customers, we combine the real and digital worlds

We are seeking a highly skilled and experienced Product & Solution Security Expert  with a strong background in AWS, cloud security, AI security, governance, risk and compliance (GRC), and secure software development, who is passionate about cybersecurity and AI, to join our Building X cloud ecosystem. The ideal candidate will support and consult product teams in implementing security features in their products, identifying security risks, driving continuous compliance initiatives, and enabling the secure adoption of AI-powered development capabilities.

This role involves working closely with product teams to conduct security activities throughout the development process and driving a company-wide Shift-Left Security culture across software engineering, cloud operations, and AI-enabled development processes.

Would you also like to play an active role in influencing current trends and developments and make a positive impact on the lives of millions of people in Switzerland? Then you've come to the right place! Apply today for the position of Product Security Specialist - your team is looking forward to meeting you!

The Role:

Product & Solution Security

• Supporting and consulting our product lines in implementing required product and solution security practices
• Acting as the primary security point of contact for product teams during development, project execution, and service operations
• Reporting to the Product / Technical Lead and the Product & Solution Security Officer
• Providing specialized knowledge in secure architecture and design to help product teams create and operate secure applications and services
• Bringing a strong application-security perspective by understanding the application stack end to end, including frontend, backend, APIs, data, identity, infrastructure, and cloud layers
• Providing strong AWS security expertise to improve the security posture of cloud-native applications and services
• Supporting security assessments, threat modeling, risk analysis, and remediation planning throughout the software lifecycle

Cybersecurity Compliance & GRC

• Supporting the implementation of Cybersecurity Compliance programs across multiple product teams
• Defining compliance-by-design approaches and integrating security and compliance controls directly into engineering workflows
• Supporting audits and certification programs including: ISO 2700, SOC2 and Internal security and compliance assessments

Shift-Left Security & DevSecOps

• Driving the organization's Shift-Left Security strategy, enabling teams to identify and address security issues early in the development lifecycle
• Defining and implementing secure development practices, policies, standards, and guardrails
• Working closely with development teams to embed security controls into CI/CD pipelines
• Supporting implementation of: ake care of secure coding practices, software supply chain security, dependency and container security, Infrastructure as Code (IaC) security, Cloud Security Posture Management (CSPM), and vulnerability and risk management processes

AI Security & Agentic Development Lifecycle (AI-DLC)

• Promoting self-service security capabilities and security automation across engineering teams
• Contributing to the design of the Building X Agentic AI Framework operating model
• Defining security requirements, governance standards, and control frameworks for AI-assisted development
• Conducting risk assessments, threat modeling, and security reviews for AI-enabled product development workflows
• Collaborate with platform, architecture, and development teams to embed Security-by-Design and Compliance-by-Design principles into the AI Development Lifecycle (AI-DLC)
• Support alignment with emerging AI security and governance standards (e.g., ISO 42001)

Your talents and experience

• Master's degree in Information Systems, Cybersecurity, Computer Science, or a related field
• Extensive experience (5+ years) as a Security Expert with deep knowledge of AWS security services, architectures, and best practices
• Experience implementing security controls in cloud-native and SaaS environments, coupled with a strong understanding of modern application architectures across all layers
• Proven experience in driving Continuous Compliance programs, security governance initiatives, and utilizing GRC platforms for automated control assessments
• Strong knowledge of DevSecOps, modern software security practices, defining security controls for the AI-DLC, and understanding secure AI development and governance
• Strong knowledge of ISO 27001, SOC 2, CRA, and the EU Data Act.
• Relevant certifications such as AWS Certified Security - Specialty (highly desirable), CISSP, CISM, CCSP, and AWS Solutions Architect Professional (preferred)
• Experience working in highly regulated and audit-driven environments
• Ability to manage multiple initiatives and stakeholders simultaneously, thrive in a fast-paced, global environment with distributed teams, evolving priorities, and diverse stakeholder expectations, possess strong consulting and communication skills, and be proficient in English (German is a plus)

Employee benefits

• 2-3 days per week of mobile working is standard
• Mobility allowance
• Varied further training opportunities
• Access to employee share programs
• Further information about employee benefits can be found here

Our corporate culture - your new working environment

The culture at Siemens Switzerland is more than just a working environment - it is at the heart of our day-to-day interactions and the key to our success. Siemens Switzerland offers a future-oriented working environment characterized by innovation, sustainability and personal development. We are characterized by personal responsibility, equal opportunities and diversity, to which every employee can contribute authentically. Flexible working models and remote working are a reality for us and enable our employees to achieve a good work-life balance. Learn more and find out if you are a good match with Siemens by taking our culture quiz! 

News and stories

See for yourself how innovative technology can change the present. If you want to find out more about what projects can be implemented using Siemens technology, here are some current examples.

Frequently asked questions and contact information

Here you will find a collection of frequently asked questions and a way to contact us directly.

I look forward to receiving your application.

Nathalie
Talent Acquisition Partner

Your way to Siemens - How we hire

Information for recruitment agencies: Siemens is not accepting applications from recruitment agencies for this position. Thank you for your understanding.