Endpoint Security Engineer - OT

ZEISS Group
München, Germany
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English

Tech stack

Python (Programming Language) Network Segmentation Windows PowerShell Runbook Scripting Malware CIS Benchmarks

Job description

Welcome to ZEISS - a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS Your role Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation) Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Requirements

Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change) Strong troubleshooting skills and the ability to work effectively with production teams and external providers Excellent communication skills in English, with the ability to collaborate across global teams Working experience in multinational manufacturing or regulated OT environments Security-related background checks may be conducted as part of the hiring process. At an advanced stage of the application process, a police clearance certificate must be submitted.

About the company

Zeiss Alle Jobs anzeigen

  • Oberkochen, Baden-Württemberg München, Bayern
  • Unbefristet
  • Vollzeit

  • 7 Stunden her

Step out of your comfort zone, excel and redefine the limits of what is possible. That’s just what our employees are doing every single day - in order to set the pace through our innovations and enable outstanding achievements. After all, behind every successful company are many great fascinating people. In a spacious modern setting full of opportunities for further development, ZEISS employees work in a place where expert knowledge and team spirit reign supreme. All of this is supported by a special ownership structure and the long-term goal of the Carl Zeiss Foundation: to bring science and society into the future together. Join us today. Inspire people tomorrow. Diversity is a part of ZEISS. We look forward to receiving your application regardless of gender, nationality, ethnic and social origin, religion, philosophy of life, disability, age, sexual orientation or identity.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerjet.de

Inside ZEISS Group

Culture, engineering, and team stories

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:47 min

Exploring career opportunities and recruitment open positions

Kurt Eder · LIVE

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

5:11 min

Deploying manual Seccomp profiles to block malware

Dimitrij Klesev +1 · LIVE

2:50 min

Introduction and the value of runbooks

Hila Fish · WWC 2023

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper · Europe 2026 Virtual

Videos

See all

Related articles

See all