OT Security & Hardware Engineer (m/f/d) in Mannheim

As an OT Security & Hardware Engineer (m/f/d), you will support the secure operation of critical control and automation systems in the environment of energy suppliers and critical infrastructures (KRITIS). You will analyze IT/OT systems for vulnerabilities, manage the cybersecurity infrastructure, and ensure the high availability of the deployed hardware and server systems. Conducting vulnerability assessments in OT environments; planning, execution, and documentation of security assessments; operation and administration of Tenable Nessus for conducting regular vulnerability scans; analysis, evaluation, and tracking of security gaps according to the recommendations of the BSI, CERT, and manufacturers; planning, control, and execution of patch management activities using BigFix; administration and hardening of Microsoft Windows Server and Red Hat Enterprise Linux (RHEL) systems; installation, operation, and maintenance of virtualization platforms based on Proxmox; support and further development of malware protection solutions based on Trellix (ePO, antivirus, application control/whitelisting); support with compliance checks and security audits; analysis of security events and development of suitable countermeasures; installation, configuration, and maintenance of server, storage, and network hardware; configuration and troubleshooting of network components (switches, routing, VLANs); support of customer projects in the areas of OT security, system hardening, and infrastructure modernization; creation of technical documentation, operational and Security concepts. Close collaboration with customers, manufacturers, and internal service and engineering teams.

• Successfully completed studies in the field of computer science, IT security, telecommunications engineering (or comparable) OR a successfully completed vocational training as an IT specialist for system integration (m/f/d) or a comparable technical qualification
• At least 5 years of professional experience in IT/OT security, system administration or in critical infrastructure environments
• Solid experience in operating Windows and Linux-based server infrastructures
• Experience with industrial networks, control or automation systems is a strong plus.

Must-haves:

• Tenable Nessus
• Microsoft Windows Server & Red Hat Enterprise Linux (RHEL)
• Trellix (formerly McAfee): ePO, Antivirus and/or Application Control
• Network basics (TCP/IP, routing, VLAN, firewall concepts)
• Solid knowledge in the field of server hardware and operating systems

Nice-to-haves:

• Proxmox VE, VMware vSphere
• HCL BigFix (Patch Management)
• Knowledge of: CIS Benchmarks, BSI IT Baseline Protection, IEC 62443, NIS2, KRITIS requirements
• Scripting: PowerShell, Bash or Python
• Monitoring systems (e.g. PRTG)
• Industry experience in the field of energy supply / critical infrastructures

Personal skills (soft skills)

• Analytical and structured approach to work.
• Strong security awareness.
• A high degree of personal responsibility and a strong customer focus.
• Excellent communication skills for working in interdisciplinary teams.
• Commitment and willingness to continuously develop professional skills.

Preferred certifications (advantageous)

• Tenable Certified Professional
• Red Hat Certified System Administrator (RHCSA)
• Trellix Certified Professional
• CompTIA Security+
• CISSP
• IEC 62443 Cybersecurity Fundamentals Specialist
• BSI IT Baseline Protection Practitioner

#J-18808-Ljbffr