OT Security Consultant (m/w/d)

Codewerk stands for technology enthusiasm, innovation and reliability with flat hierarchies, free space and development opportunities. Whether in trains or industrial facilities – we bring the systems of tomorrow to talk to each other.

We need your help. We are looking for clever heads for the development of industrial software systems for tomorrow. Start with us in Karlsruhe, Berlin, Cottbus and Murnau!

Your Mission:

As an OT Security Consultant, you will advise customers from the rail and industrial sectors on all security-related topics – from risk analysis to security strategies and implementation of specific measures. You will work practically, technically grounded and closely with external partners and internal teams.

Tasks

Your Tasks:

• You will advise our customers on cyber-security strategies for OT environments (e.g. signal technology, train control systems, process control systems, SCADA/ICS).

• You will develop security architectures and concepts as well as secure network segmentation (zones & conduits according to IEC 62443) and defense-in-depth strategies.

• You will analyze existing OT environments for vulnerabilities and risks, industrial protocols (e.g. Modbus, OPC UA, PROFINET, MVB/WTB in rail applications) and embedded systems.

• You will test regulatory requirements and accompany their implementation in customer projects. Relevant standards and regulations include:

• IEC 62443 (all relevant parts),

• CENELEC TS 50701 (Cyber Security in the rail sector),

• EN 50126/50128/50129 (RAMS/Safety in the rail sector),

• Cyber Resilience Act (CRA),

• NIS2 Directive

• IT-Security Law 2.0.

• You will conduct gap analyses as well as threat and risk analyses (TRA).

• You will conduct security assessments, including penetration tests, vulnerability analyses and security reviews for industrial control systems and embedded platforms.

• You will develop our security portfolios with and further develop them, e.g. through new service offerings in the area of OT monitoring, incident response for OT or secure-by-design consulting.

• You will support compliance checks, audit preparation and security governance.

• You will moderate workshops, present results and recommendations to technical and non-technical stakeholders.

Qualification

This foundation you bring with you:

• You have a completed degree in the field of computer science, IT security, cyber security, electrical engineering, automation technology or relevant practical experience.
• You have knowledge of cyber-security technologies such as SIEM, IDS/IPS, network security, firewalls, VPN/remote access protection in OT environments.
• You have a good understanding of industrial networks, embedded systems and secure development processes – ideally in the context of rail or industrial applications.
• You have experience with relevant standards and regulations, particularly IEC 62443, TS 50701 and IEC 63452.
• You have experience with threat analyses, security processes and the tension between safety and security.
• You possess programming knowledge in C/C++, Rust or Python, particularly for security analysis, scripting and tooling.
• You think analytically and structured and work independently as well as solution-oriented.
• You have fun with project work, customer contact and technical exchange.
• You are characterized by team spirit, communication strength and curiosity about new technologies and threat scenarios.
• You focus on developing innovative and efficient software solutions. To this end, you use common AI tools such as GitHub Copilot.
• You have very good German and good English skills.

Benefits

This is what we offer:

• Fascinating security projects with real impact on the security of critical infrastructure – whether on the train or in industry.
• A open and communicative team that takes you along professionally as well as for after-work beer.
• Access to knowledge and know-how in innovative, future-oriented technologies.
• Active support for certifications and further education (e.g. ISA/IEC 62443, GICSP, OSCP).
• A modern workplace.
• Much free space and growth opportunities for your professional as well as personal development.
• Exceptional remuneration and a flexible home office regulation.

We look forward to your application!

Find more English-speaking jobs in Germany on Arbeitnow