Endpoint Security Engineer - OT (f/m/x)
Carl Zeiss Jena GmbH
Apply to this jobWelcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS
Your role
Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites
Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients
Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)
Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures
Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments
Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management
Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives
Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives
Your profile
Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions
Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations
Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning
Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency
Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)
Strong troubleshooting skills and the ability to work effectively with production teams and external providers
Excellent communication skills in English, with the ability to collaborate across global teams
Working experience in multinational manufacturing or regulated OT environments
Your ZEISS Recruiting Team:
Markus ReppSummary
Manage OT endpoint security, troubleshoot incidents, and collaborate on security upgrades.
Job title
Endpoint Security Engineer - OT (f/m/x)
Experience level
null
Industry
healthcare
Location requirements
Oberkochen, Jena, München, Petaling Jaya; remote work not specified
Salary
Not specified
Visa sponsorship
H-1B sponsor history
Management role
No
Required skills
Preferred skills
Specializations
Structured locations inferred from the posting.
73447 Oberkochen, Germany
07 Jena, Germany
Munich, Germany
Petaling Jaya, Selangor, Malaysia