Endpoint Security Engineer - OT (f/m/x)

ZEISS; Deutschland; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

ZEISS is seeking an OT Endpoint Security Engineer to deploy and operate TXOne Stellar, MCS and related components across global sites. You will maintain hardened baselines for OT endpoints, integrate telemetry into central monitoring, and automate routine tasks to improve efficiency.

The role requires hands-on OT security experience, scripting skills (PowerShell, Python) and familiarity with Microsoft Defender ecosystem.

Qualifikationen

• Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations and similar OT-focused endpoint security solutions.
• Strong understanding of OT environments, including legacy OS, segmentation and production constraints.
• Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning.
• Scripting/automation experience (PowerShell, Python) for telemetry, packaging and operations.
• Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change).
• Strong troubleshooting skills and ability to collaborate with production teams and external providers.
• Excellent communication skills in English, with cross‑team collaboration across global sites.
• Working experience in multinational manufacturing or regulated OT environments.

Aufgaben

• Deploy, configure and operate TXOne Stellar, MCS and related OT endpoint security components across global manufacturing sites.
• Maintain and improve hardened security baselines for OT endpoints, including legacy OS and production-critical devices.
• Integrate OT telemetry, health checks and alerts into central monitoring, dashboards and ITSM; automate routine tasks.
• Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and preventive measures.
• Ensure policy consistency, allow/deny lists, signature tuning and stable operation in production environments.
• Collaborate with OT/IT stakeholders, production teams and external partners to support rollout and lifecycle management.
• Maintain service documentation (runbooks, architecture diagrams, SOPs) and support audit readiness.
• Contribute to the OT security roadmap and alignment with Defender/XDR initiatives.

Kenntnisse

TXOne Stellar

Portable Inspectors

Malware Check Stations

OT endpoint security

OT environments

AV/EDR

Application control

Removable media governance

Policy tuning

PowerShell

Python

Microsoft Defender (MDE)

XDR

ITSM processes

Troubleshooting

English communication

Global manufacturing experience

Jobbeschreibung

Your role

• Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites
• Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients
• Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)
• Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures
• Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments
• Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management
• Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives
• Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile

• Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions
• Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations
• Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning
• Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency
• Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)
• Strong troubleshooting skills and the ability to work effectively with production teams and external providers
• Excellent communication skills in English, with the ability to collaborate across global teams
• Working experience in multinational manufacturing or regulated OT environments