Technical Product Safety/Information Security Engineer

OHB SE

Job

In this role, you actively shape information security, analyze product vulnerabilities, and support the implementation of regulatory requirements like the Cyber Resilience Act while developing technical solutions.

Job summary

This listing has been machine translated. Show original

Your role in the team

  • Would you like to do more than manage information security and actively shape it? In this role, you’ll work at the intersection of product development, OT/IT infrastructure, and information security.
  • You support technical teams in analyzing and addressing product vulnerabilities, contribute to implementing current regulatory requirements such as the Cyber Resilience Act (CRA), NIS2, and ISO 27001, and drive the technical advancement of information security across the company.
  • A key part of the role will continue to be hands-on technical work on products, systems, and security measures.
  • Analysis, assessment, and tracking of vulnerabilities in in-house and third-party products, as well as in IT/OT infrastructure.
  • Conducting technical risk and security assessments and deriving appropriate countermeasures.
  • Support in implementing product security requirements throughout the entire product lifecycle.
  • Contributing to security concepts, security assessments, and security-related technical documentation.
  • Assessment of software components, open-source elements, and supplier products with regard to cybersecurity risks.
  • Support with vulnerability management, patch management, and hardening measures.
  • Support in implementing regulatory requirements, particularly in the areas of the Cyber Resilience Act (CRA), NIS2, and IEC 62443.
  • Technical point of contact for product security and vulnerability management in development and infrastructure projects.
  • Technical implementation of group policies and security requirements.
  • Assessment of technical risks and identification of appropriate protective measures.
  • Advising business units on technical information security matters.
  • Support with internal and external audits.
  • Contribute to the operation and further development of the Information Security Management System (ISMS).
  • Support with technical risk analyses and risk treatments.
  • Gradual assumption of technical governance responsibilities.
  • Expanding technical security expertise at the site.
  • Development into a technical point of contact for Product Security, OT Security, and information security.
  • Potential transition into a TISO role.

Our expectations of you

Education

  • Completed degree in electrical engineering, information technology, security engineering, computer science, or a comparable technical field.

Qualifications

  • Basic understanding of product security, vulnerability management, and information security.
  • Knowledge of relevant standards and regulatory requirements such as ISO 27001, IEC 62443, NIS2, or the Cyber Resilience Act is an advantage.
  • Analytical, structured, and solution-oriented approach to work.
  • Strong hands-on technical mindset and a passion for collaborating with development, infrastructure, and business teams.
  • Very good German and good English skills.

Experience

  • Several years of hands-on experience in a technical environment, ideally in product development, embedded/OT systems, IT infrastructure, or cybersecurity.

What we offer

  • Key role in building and advancing Product Security and information security.
  • Direct involvement in implementing the Cyber Resilience Act (CRA), NIS2, and ISO 27001.
  • Close collaboration with Development, Infrastructure, and Management.
  • A high degree of technical ownership and opportunities to shape things.
  • A broad range of topics covering Product Security, OT Security, and information security.
  • Individual development into a Technical Information Security Officer (TISO).
  • Long-term prospects in a technologically challenging environment.
  • Hands-on technical work, including beyond progressing into a TISO role.

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Gilching
    82205 Bayern, Germany

About your employer

OHB SE is a leading company in the aerospace industry. With over 40 years of experience, we develop high-tech solutions for space exploration and other fields. Our portfolio includes satellite systems for Earth observation, navigation, telecommunications, science, and reconnaissance. We realize missions to explore the universe and develop systems for human spaceflight. With over 3,000 employees at 15 locations, we create infinite possibilities in space. We.Create.Space.

Company type
Established Company
Work model
Onsite, Hybrid
Industry
Science, Research
  • Tröger & Cie. AktiengesellschaftNuremberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5
  • Öko-Institut Consult gGmbHFreiburg im Breisgau, Berlin

    • Easy Apply
    • Hybrid
    • Onsite
    • Part Time/Full Time

    Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...

    • TCP/IP
    • Active Directory
    • Windows
    • Microsoft Exchange
    • Office 365
    • Linux
    • VLAN
    • +4
  • Die Deutsche RentenversicherungBerlin

    • Hybrid
    • Onsite
    • Part Time/Full Time

    Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...

    • Docker
    • GitLab
    • Jenkins
    • OpenShift
    • Grafana
    • PostgreSQL
    • ArgoCD
    • +2
    • +4

Technical Product Safety/Information Security Engineer

OHB SE