Endpoint Security Engineer - OT
ZEISS Group
Oberkochen, Germany
yesterday
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Oberkochen, Germany
Tech stack
Python
Network Segmentation
Powershell
Runbook
Scripting (Bash/Python/Go/Ruby)
Malware
CIS Benchmarks
Job description
- Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites
- Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients
- Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)
- Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures
- Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments
- Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management
- Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives
- Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives
Requirements
- Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions
- Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations
- Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning
- Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency
- Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)
- Strong troubleshooting skills and the ability to work effectively with production teams and external providers
- Excellent communication skills in English, with the ability to collaborate across global teams
- Working experience in multinational manufacturing or regulated OT environments
About the company
ZEISS is technology, optics and innovation. We develop, manufacture and sell highly innovative products and solutions for our customers in a variety of business fields. As one of the world’s top technology companies with a portfolio aligned with future growth areas like digitalization, healthcare and Smart Production, and a strong brand to boot, ZEISS is shaping the future far beyond the optics and optoelectronics industries. The company’s significant, sustainable investments in research and development lay the foundation for the success, continued expansion and market leadership.