Expert Product Security (m/w/x)

Trust something new, grow beyond itself and redefine the boundaries of the feasible. That is exactly what our employees can and should live daily. To set the pace with our innovations and make it great. Because there are a lot of fascinating people behind every successful company. ZEISS employees work in an open and modern environment with numerous development and further training opportunities. Our culture is characterized by expert knowledge and team spirit. All this is supported by the special ownership structure and the long-term goal of the Carl-Zeiss Foundation: to advance science and society together.

Today dare. Inspire tomorrow.

Diversity is part of ZEISS. We look forward to your application regardless of gender, nationality, ethnic and social origin, religion, world view, disability, age as well as sexual orientation and identity.

Apply now! In less than 10 minutes.

addressable addressing of stakeholders from developer to management and from IT to legal department

Support and advice of the development departments in security issues as well as in the use of security tools (e.g. SAST, DAST, SCA)

Support in creating and implementing policies, guidelines, best practices and approach models

Conducting Risk Assessments, Threat Modelling and Protection Requirements Analysis

Further development of product security training content

Support R&D and Sales areas for customer appointments or customer requests regarding security issues

Incident and Vulnerability Management for Products

at least 3-5 years of professional experience in the field of software development and/or cy-ber/product/application security, preferably in the industrial context Ideally one of the following certifications: CISSP, CSSLP, CEH or also the desire and willingness to seek certification in the future

Knowledge in one or more of the following areas: IoT Security, Application Security, Threat Modelling, Hardening, Penetration Testing, Vulnerability/Incident Management, SecDevOps, Secure (Software) Development Lifecycle

Application and implementation of cybersecurity standards (such as IEC 62443, ISO 270xx) in the development area

Curiosity on high-tech products and machines

rapid understanding and willingness to learn about new technologies/application methods and willingness to learn

Wish to pass on his cyber security knowledge to colleagues and developers

Implementation of the end-to-end security support, from product start with a risk assessment to release validated by a penetration test

English and German

JOBV1_EN