Endpoint Security Engineer - OT (f/m/x)

ZEISS Group; Oberkochen; Vor Ort; EUR 80.000 - 120.000; Vollzeit

Zusammenfassung

ZEISS Group is seeking an experienced OT security specialist to deploy, configure and operate TXOne Stellar, Malware Check Stations and related OT endpoint security components across global manufacturing sites.

You will maintain hardened OT endpoint baselines, integrate telemetry into central monitoring, and automate routine tasks while coordinating with OT/IT teams and external partners to ensure secure production environments.

Qualifikationen

• Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT endpoint security solutions.
• Strong understanding of OT environments, including legacy OS, network segmentation, and production constraints.
• Good knowledge of endpoint security fundamentals: AV/EDR, application control, removable media governance, policy tuning.
• Scripting/automation experience (PowerShell, Python) for telemetry and operations.
• Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change).
• Strong troubleshooting skills and ability to work with production teams and external providers.
• Excellent communication in English and collaboration across global teams.

Aufgaben

• Deploy, configure and operate OT security components across global manufacturing sites.
• Maintain and improve hardened security baselines for OT endpoints, including legacy devices.
• Integrate OT telemetry, health checks and alerts into central monitoring and ITSM systems; automate routine tasks.
• Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and preventive measures.
• Ensure policy consistency, allow/deny list management, and signature tuning in production.
• Collaborate with OT/IT stakeholders, production teams and external partners for rollout and lifecycle management.
• Maintain runbooks, architecture diagrams, SOPs and support compliance and audit readiness.
• Contribute to the OT security roadmap and Defender/XDR alignment.

Kenntnisse

OT security

Endpoint security

Scripting (PowerShell, Python)

Microsoft Defender ecosystem

ITSM processes

English communication

Cross-functional collaboration

Troubleshooting

Tools

TXOne Stellar

Portable Inspectors

Malware Check Stations

Jobbeschreibung

Welcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISSYour roleDeploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sitesMaintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clientsIntegrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measuresEnsure policy consistency, allow/deny list management, signature tuning and stable operation in production environmentsCollaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle managementMaintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiativesContribute to the overall OT security roadmap and alignment with Defender/XDR initiativesYour profileHands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutionsStrong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerationsGood knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuningScripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiencyFamiliarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)Strong troubleshooting skills and the ability to work effectively with production teams and external providersExcellent communication skills in English, with the ability to collaborate across global teamsWorking experience in multinational manufacturing or regulated OT environmentsYour ZEISS Recruiting Team:Markus Repp