> Markdown version of [/jobs/ext/1306782-endpoint-security-engineer-ot](https://www.wearedevelopers.com/jobs/ext/1306782-endpoint-security-engineer-ot). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Security Engineer - OT - **Company:** ZEISS Group - **Location:** Oberkochen, Germany - **Contract:** Permanent contract - **Skills:** Python (Programming Language), Network Segmentation, Windows PowerShell, Runbook, Scripting, Malware, CIS Benchmarks - **Published:** July 17, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=0e51c3f7eca73b5d ## About the Role * Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions * Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations * Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning * Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency * Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change) * Strong troubleshooting skills and the ability to work effectively with production teams and external providers * Excellent communication skills in English, with the ability to collaborate across global teams * Working experience in multinational manufacturing or regulated OT environments ## Description * Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites * Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients * Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation) * Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures * Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments * Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management * Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives * Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives ## About ZEISS Group ZEISS is technology, optics and innovation. We develop, manufacture and sell highly innovative products and solutions for our customers in a variety of business fields. As one of the world’s top technology companies with a portfolio aligned with future growth areas like digitalization, healthcare and Smart Production, and a strong brand to boot, ZEISS is shaping the future far beyond the optics and optoelectronics industries. The company’s significant, sustainable investments in research and ... **Tech Stack:** Java, .NET, Node.js, C#, Angular, React, Kubernetes, Software Architecture, C++, Python **Industries:** Electronics, Information Tech, Manufacturing, Medical Devices, Computer Software, Industrial Automation, R&D [Company profile](https://www.wearedevelopers.com/companies/1031-zeiss-group) ### More Jobs at ZEISS Group - [Senior Threat Intelligence Analyst](https://www.wearedevelopers.com/jobs/ext/2000909-senior-threat-intelligence-analyst) - [praxissemester-softwareentwicklung-inbetriebnahme-und-servicesoftware-m-w-x](https://www.wearedevelopers.com/jobs/ext/1999035-praxissemester-softwareentwicklung-inbetriebnahme-und-servicesoftware-m-w-x) - [Senior Cybersecurity Incident Responder](https://www.wearedevelopers.com/jobs/ext/1999049-senior-cybersecurity-incident-responder) - [Endpoint Security Engineer - OT](https://www.wearedevelopers.com/jobs/ext/1998712-endpoint-security-engineer-ot) - [Digital Forensic Analyst](https://www.wearedevelopers.com/jobs/ext/1982266-digital-forensic-analyst) ## Related Videos - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)