Incident Response & Reverse Engineering Penetration Tester (f/m/d)

Experience: 5 to 15 years

Location: Bratislava - Bratislavsky kraj - Slovakia; Kosice - Kosicky kraj - Slovakia; Zilina - Zilinsky kraj - Slovakia

Skills: Incident response, Digital forensics, Reverse engineering, Offensive security techniques, System security threats, Application security threats, Product security threats, Security forensic investigations, Windows, Linux, Cloud environments, Containerized environments, Embedded environments, Log analysis, Memory analysis, Binary analysis, Network artifacts analysis, Root-cause analyses, Post-incident documentation, Firmware reverse engineering, Vulnerability research, Memory corruption, Cryptographic weaknesses, Logic flaws, Penetration testing, IoT components, Cloud platforms, Threat models, MITRE ATT&CK;, Python, Bash, PowerShell, Active Directory, Azure, AWS, Ghidra, IDA Pro, Radare2, Debuggers, Penetration testing frameworks, Post-exploitation techniques, Threat modeling, Attacker TTP analysis

Your Responsibilities
Product Security Incident Response (PSIRT)
- Triage, investigate, and manage security incidents affecting healthcare products and solutions
- Manage security forensic investigations by collecting, preserving, and analyzing electronic evidence from systems and devices
- Perform digital forensics and technical incident response across Windows, Linux, cloud, containerized, and embedded environments
- Analyze logs, memory, binaries, and network artifacts to determine root cause and impact
- Support containment, eradication, and recovery activities in close collaboration with product engineering teams
- Produce clear, high-quality incident reports, root-cause analyses, and post-incident documentation
- Coordinate incident handling activities across product security, legal, privacy, quality, and communications stakeholder

Reverse Engineering & Offensive Security
- Conduct reverse engineering of firmware, binaries, and applications to identify product vulnerabilities




- Perform vulnerability research including memory corruption, cryptographic weaknesses, and logic flaws
- Execute authorized penetration tests against products, healthcare devices, IoT components, and cloud platforms
- Align offensive findings with real-world attacker techniques using threat models such as MITRE ATT&CK;
- Feed penetration testing and reverse engineering insights back into PSIRT processes and prevention measures

Your Profile
- 5+ years of experience in cybersecurity incident response, digital forensics
- Solid hands-on experience with reverse engineering and offensive security techniques
- Solid understanding of system, application, and product security threats
- Experience working in regulated, safety-critical, or high-assurance environments is highly beneficial
- Ability to remain structured, analytical, and effective during high-pressure incident situations
- Excellent written and verbal communication skills in English

Technical Skills
- Incident response and digital forensics methodologies
- Reverse engineering tools such as Ghidra, IDA Pro, Radare2, and debuggers
- Penetration testing frameworks and post-exploitation techniques
- Scripting and automation using Python, Bash, and/or PowerShell
- Familiarity with Windows, Linux, Active Directory, cloud platforms (Azure, AWS), and container technologies
- Threat modeling and attacker TTP analysis

Certifications (Nice to Have)
- Offensive Security Certified Professional (OSCP)
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- OSCE / OSED / OSEE or comparable advanced offensive security certifications
- GIAC Certifications related to Incident Response or Forensics (e.g., GCIA, GCIH, GCED)




- CREST or equivalent industry-recognized credentials

Our Culture
At Siemens Healthineers, we value different perspectives, continuous learning, and collaboration. You will work in an international environment with highly skilled experts who are passionate about protecting innovative healthcare technology and improving patient safety worldwide.

*We are required by law to disclose basic wage component (minimum salary) for the advertised positions. We carefully consider your professional qualifications and experience in our compensation package and/or when offering you other positions.

Our goal is to pay our employee's fairly, with regard to the market situation and we are ready to welcome high-quality candidates in our team.

Basic wage component (gross) and other rewards
: starting from 3300 EUR brutto /month + VAR*

What do we offer:
Variable and Christmas bonus
• Hybrid type of work – combination of telework and work from office
• Flexible Working Hours
• Bridge days – free extra paid leave 6 days per year
• 3 sick days per year (no doctor’s permit needed)
• In case of sickness 100% salary reimbursement 20 days/ year, this includes max. 10 days/ year for of family care
• Additional pension plan
• 300 EUR for regeneration of work force via cafeteria system
• Wellbeing program – Psychological, Legal and Financial Councelling
• Family care program (subsidy for newborns, maternity leave, kindergardens, summer camps)
• Retention program (work anniversary, life anniversary, employee loans)
• Training and development program (business and product trainings, e-learning, language courses, soft skills trainings,…)
• Adjustable standing desk as a standard
• Participation on world famous IT conferences like Microsoft IGNITE for best employees
• Wide project portfolio in healthcare domain and job rotation within company (Cybersecurity, Artificial Intelligence, Healthcare IT services, …)

📌 Incident Response & Reverse Engineering Penetration Tester (f/m/ (Mumbai)
🏢 Siemens
📍 Mumbai