Remediation Engineer – Cybersecurity Operations

Dear Aspirant!

We empower our people to stay resilient and relevant in a constantly changing world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make a great addition to our vibrant international team.

We are looking for: Cybersecurity Professional - Remediation Engineer – Cybersecurity Operations

You’ll make an impact by:

• Execute approved security patches and updates for Windows Servers and workstations, including monthly security updates, Edge updates, and other approved Windows components.
• Manage Microsoft .NET Framework versions and security updates; troubleshoot failed or incompatible updates; and perform application compatibility and regression checks as defined in the change plan.
• Perform approved Active Directory and Group Policy remediation, including password and account policies, NTLM/null-session settings, privilege assignments, and other Windows authentication or configuration findings.
• Apply approved Microsoft Security Baselines and CIS Benchmark settings in accordance with documented implementation instructions and change-control procedures.
• Use PowerShell to automate repeatable remediation, configuration checks, pre-/post-change validation, evidence capture, and operational reporting.
• Perform approved Red Hat Enterprise Linux (RHEL) patching using Yum/DNF, including applicable kernel and core-library updates; plan reboots and validate services after patching.
• Support endpoint-security/antivirus/EDR remediation, including agent health, policy compliance, update failures, and recovery of unhealthy agents.
• Support Microsoft SQL Server security updates as assigned, following approved procedures for backup verification, dependency checks, and post-update service validation.
• Coordinate remediation execution with asset owners, application teams, infrastructure teams, vendors, and the responsible DTS/C&T SME.
• Follow approved change records, maintenance windows, rollback plans, and service-restoration procedures. Do not make independent decisions that could affect production availability or safety.
• For assets operating in OT/manufacturing environments, execute only approved remediation under the applicable plant change-control process and technical direction from the responsible DTS/C&T SME.
• Escalate work involving PLCs, HMIs, SCADA/DCS platforms, industrial networks, production architecture, vendor-qualified firmware, MES, or legacy production systems to the designated onshore SME. Do not independently change these systems.
• Implement compensating controls only when selected, documented, and technically defined by the responsible DTS/C&T SME and approved through the applicable process.
• Coordinate vulnerability rescans and validate fixes using approved scanner results, configuration checks, service checks, or other specified test procedures.
• Investigate failed remediation, persistent findings, unexpected application behavior, and dependency issues; document results and escalate unresolved or production-sensitive issues.
• Maintain accurate ticket updates, change records, remediation evidence, validation results, rollback details, and closure documentation.
• Track remediation status, blockers, exceptions awaiting authorized decisions, and overdue actions; escalate according to defined SLAs and operating procedures.

Use your skills to move the world forward!

• B.E./B.Tech./MCA/M.Sc. in Computer Science, Information Technology, Engineering, or a related discipline.
• 6–8 years of relevant experience in infrastructure operations, vulnerability remediation, Windows/Linux administration, patch management, or security hardening.
• Demonstrated experience executing enterprise patching and remediation activities in controlled production environments.
• Experience supporting manufacturing or OT-connected environments is preferred.
• Certifications in Microsoft technologies, Red Hat/Linux, cybersecurity, or IT service management are an advantage.
• Strong hands-on Windows Server and Windows workstation administration, patching, troubleshooting, and security hardening.
• Practical Microsoft .NET Framework update management, IIS fundamentals, application dependency awareness, compatibility troubleshooting, and regression validation.
• Active Directory and Group Policy administration, Windows authentication hardening, Kerberos/NTLM concepts, password/account policies, and controlled policy deployment.
• Knowledge of Microsoft Security Baselines and CIS Benchmarks, including implementation of prescribed settings and validation of their effect.
• Strong PowerShell scripting and automation skills are required, including safe, repeatable scripts for remediation and validation.
• Hands-on Red Hat Enterprise Linux administration, Yum/DNF package and repository management, kernel/core-library patching, shell basics, reboot planning, and post-patch validation.
• Endpoint protection/antivirus/EDR agent troubleshooting and remediation.
• Basic-to-intermediate Microsoft SQL Server patching and service-dependency awareness; backup verification and failover/recovery awareness are desirable.
• Experience using vulnerability-management tools such as Tenable, Qualys, Wiz, Rapid7, or equivalent, and interpreting CVE/CVSS-based findings.
• Working knowledge of IT/OT environments, including SCADA, substations, utilities, HMI, PLC, RTU, DCS, and manufacturing systems; this is for context and safe execution, not independent OT engineering authority.
• Awareness of industrial environment constraints such as Purdue-model concepts, segmentation boundaries, plant availability, safety, vendor support, and maintenance windows.
• Ability to follow formal change management, implementation plans, rollback procedures, and escalation paths.
• Good troubleshooting, root-cause analysis, documentation, and collaboration skills.
• Bash and Python scripting are preferred; experience with configuration-management or endpoint-management tools is an advantage.

Create a better #TomorrowWithUs!

This role is based in Chennai, where you’ll get the chance to work with teams impacting entire cities, countries - and the shape of things to come.

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us.

We’re Siemens. A collection of over 312,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and imagination and help us shape tomorrow.

Find out more about Siemens careers at: www.siemens.com/careers

Find out more about the Digital world of Siemens here: www.siemens.com/careers/digitalminds

Job ID

524201

Posted since

06-Oct-2026

Organization

Foundational Technologies

Field of work

Cybersecurity

Company

Siemens Technology and Services Private Limited

Experience level

Experienced Professional

Job type

Full-time

Work mode

Office/Site only

Employment type

Permanent

Location(s)

• Chennai - Tamil Nadu - India