Job Description

Mode of Employment: Fixed Term Security threat & risk analysis is an essential step in secure product development, and accordingly required by regulations like EU CRA. At the same time, existing tooling is not optimally supporting users to capture and model the system and then systematically identify and rate possible attacks and their impacts.
With this master thesis, you have the opportunity to work with experts in the field, get insights into the practice of security threat & risk analysis in a technology company, and make a contribution that is immediately relevant in practice.
Ready to shape the future of cybersecurity at Siemens? As a Master Thesis student (f/m/d) in Graphical Authoring of System Overviews for Security Threat & Risk Analyses, you'll dive into groundbreaking research and hands-on implementation - turn your innovative ideas into real impact for critical infrastructure protection!
What we offer you

• Exciting research and development projects that put your theoretical knowledge into practice
• Individual supervision and support from experienced experts in your field
• Access to the latest technologies, laboratories, and resources
• Diverse opportunities to contribute your ideas and actively shape the projects
• Excellent career opportunities through contact with potential employers

You'll make an impact by

• You study computer science, information security, software engineering or a related field and want to apply your knowledge in a real-world industrial context
• Initially, you investigate current practices for graphical system overview authoring, identify relevant challenges, and derive requirements for the TRA-X data model and possible threat scenario representations
• Building on this, you evaluate existing libraries and frameworks (such as mxGraph/Draw.io or GoJS), select the most suitable implementation approach, and develop a proof-of-concept for graphical modeling within TRA-X
• Subsequently, you compare the benefits and limitations of graphical versus non-graphical system descriptions using real Siemens product cases to validate your solution

This is how you'll win us over

• Education: You are currently enrolled in a university program in computer science, software engineering, information security, or a related technical field
• Experience and Skills:

• Solid understanding of cybersecurity concepts, especially threat and risk analysis
• Experience with software engineering practices and tool development
• Familiarity with graphical modeling concepts, such as data flow diagrams, and knowledge of tools like OWASP ThreatDragon or Microsoft TMT
• Ways of Working: You have an analytical mindset, a structured approach to problem solving, and strong communication skills
• Languages: You possess very good English skills, both written and spoken

You are much more than your qualifications, and we believe in the potential of every single candidate. We look forward to getting to know you!
At Siemens, we believe that feeling valued and included is the foundation for doing great work. That's why we aim to create an inclusive workplace where everyone feels a sense of belonging, and where individual perspectives and experiences are celebrated. Our commitment to fairness and respect extends to every applicant.
As an , we welcome applications from individuals of all backgrounds and particularly encourage applications from persons with disabilities.
About Us
The world never stands still. And new challenges arise every day. With a passion for questioning things, for supplying ideas, and intelligently driving things forward we are helping society move towards a smarter tomorrow. Be it with technologies that reduce carbon emissions in cities or hyperintelligent robots. This is how we are able, to tackle the most important projects and push them forward together. Help us shape the future.
- if you would like to find out more about jobs & careers at Siemens.
- if you need further information on the application process.
If you have more questions please contact:
#sagthesis

Skills Required