The Ottobock Cybersecurity Team is comprised of experienced and dedicated cybersecurity professionals with the mission to sustainably protect Ottobock’s information assets and infrastructure worldwide – and to demonstrate that protection through verifiable results. The team is responsible for defining and implementing risk-based cybersecurity management across the Ottobock Group globally. It monitors the implementation of defined controls, conducts assessments to evaluate risks, and defines mitigation measures. Based on those insights, current threat developments, existing and new regulatory requirements, and emerging technologies, the team advises IT and business departments and drives initiatives and projects to enhance cybersecurity worldwide.
As a Senior Cyber Security Solutions Architect (f/m/d), you will take technical responsibility for the further development and implementation of Ottobock’s global cybersecurity architecture. You will actively design secure, future-proof IT security solutions based on the Microsoft Security Tech Stack, coordinate internal and external experts, and ensure cybersecurity is not only planned but also implemented—hands-on, scalable, and effective.
You want to do more than just consult? You’re not interested in endless strategy papers but want to dive deep into the technology, develop real solutions, and implement them yourself? Then join our dynamic, international Cybersecurity Team!
Duties & ResponsibilitiesDesign and implement modern, technical security architectures based on the Microsoft Security Tech Stack (e.g., Defender, Sentinel, Entra, Purview, etc.)
Technically implement security solutions in close collaboration with internal IT and business units as well as external partners
Coordinate external consultants, review their work, and integrate their solutions into our system landscape
Identify, evaluate, and secure vulnerabilities and threat scenarios within the IT infrastructure
Support and lead projects and initiatives aimed at enhancing cybersecurity globally – hands-on and deeply technical
Work closely with the CISO, acting as a technical sparring partner – and potentially as deputy in the future
Contribute to the international cybersecurity team through weekly virtual meetings and regular in-person gatherings
Several years (minimum 5) of professional experience in cybersecurity, ideally in an architectural or strategic consulting role
In-depth expertise in the Microsoft Security Tech Stack, especially:
Microsoft Defender (for Endpoint, Identity, Cloud, IoT)
Microsoft Sentinel (SIEM/SOAR)
Microsoft Purview (Information Protection & Compliance)
Azure Security Center / Microsoft Entra / Conditional Access
Experience designing and implementing security architectures in hybrid cloud and on-premises environments
Solid knowledge in Operational Technology (OT), especially:
Segmentation, monitoring, and protection of OT environments
Application of standards such as IEC 62443, NIST SP 800-82
Experience integrating security requirements across the entire software development lifecycle (SSDL)—planning, design, development, testing, and operations
Ability to advise development teams on secure architectural decisions and DevSecOps practices
Familiarity with secure coding practices and common vulnerabilities (e.g., OWASP Top 10, CWE/SANS)
Knowledge in static and dynamic code analysis, threat modeling, secure code reviews, and automated security testing
Independent, solution-oriented work style – you take initiative and deliver results
Strong team player mentality in an international, dynamic environment
Experience in conducting risk assessments, architecture reviews, and security evaluations
Capability to develop security strategies and roadmaps in close coordination with the CISO and other stakeholders
Experience integrating OT security into existing IT security architectures
Experience collaborating with interdisciplinary international teams (e.g., IT, OT, Production, Engineering)
Excellent communication skills in both German and English (written and spoken)
Certifications such as Microsoft Certified: Cybersecurity Architect Expert, AZ-500, SC-100, CISSP, GICSP, or equivalent are a plus
Flexible and family-friendly working time models
Mobile work options and 30 vacation days
Attractive salary package, company pension plan, and private accident insurance
Comprehensive onboarding program for an optimal start
Corporate benefits and discounts at local businesses
Individual development and training opportunities through the Ottobock Academy and external training providers