Skip to sign up

Job matched to your search

Z

Endpoint Security Engineer - OT (f/m/x)

ZEISS Group · Oberkochen

Oberkochen · On-siteFull-TimePosted Jul 15, 2026

Free · Join 5,000+ job seekers using Qarera

How well do you match this role?

Tap the skills you already have — then see your real match score, what’s missing, and your resume fixed for this job.

↑ tap the skills you have
Loading sign-in…
Free · no credit card · 30 seconds

Job description

Welcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS

Your role

Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites

Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients

Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)

Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures

Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments

Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management

Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives

Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile

Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions

Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations

Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning

Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency

Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)

Strong troubleshooting skills and the ability to work effectively with production teams and external providers

Excellent communication skills in English, with the ability to collaborate across global teams

Working experience in multinational manufacturing or regulated OT environments

Your ZEISS Recruiting Team: Markus Repp

Don’t just read the job — see if you’ll get it.

Get your match score, a resume tailored to this exact role, and jobs like it — free.

Check my fit for this job
Loading sign-in…
Apply →