Product Security Engineer (m/w/d)

About Us

We are Beckhoff Automation, a family-run automation company and pioneer of PC-based control technology. Our open automation systems are used worldwide in diverse applications, including mechanical engineering, wind turbines, battery cell production, process and entertainment industries, and intelligent building automation. As a Product Security Engineer (m/f/d), we work together on practice-oriented, formally correct, and implementable solutions for securing our products. We offer exciting tasks in an international high-tech company with plenty of scope for innovative ideas and technical development, an open and family-oriented corporate culture with flat hierarchies and a personal "Du", a future-proof job in an economically sound owner-managed family business, as well as attractive remuneration, 30 days of vacation, contributions to company pension schemes beyond statutory requirements, capital-forming benefits, holiday and Christmas bonuses, flexible and modern working time models including flexitime, and the possibility of mobile working after familiarization.

Your Responsibilities

• Conducting or commissioning comprehensive cybersecurity analyses of products, e.g., penetration tests
• Developing software tools and (partial) automations for vulnerability scans
• Performing robustness tests, e.g., by fuzzing network protocols
• Analyzing components in products for their suitability
• Evaluating the effectiveness and completeness of vulnerability fixes in products
• Advising and supporting our product divisions regarding cyber-secure product development
• Moderating or evaluating threat analyses for products and systems
• Supporting the evaluation and remediation of cybersecurity vulnerabilities in software components
• Developing proposals for improving products with regard to cybersecurity

Requirements and Your Profile

• Successfully completed studies in computer science, cybersecurity, electrical engineering, or a comparable qualification
• In-depth knowledge of software architectures and experience with network protocols (e.g., Ethernet, TCP/IP)
• Experience with penetration tests, vulnerability scans, and ideally fuzzing/robustness tests
• Experience with typical process models for cyber-secure product development is desirable
• Basic knowledge in the field of cybersecurity is advantageous
• Knowledge in automation technology and/or embedded devices is advantageous
• Optional: Experience in moderating team analyses
• Strong team spirit and communication skills
• Independent, structured, and reliable way of working
• Good German skills (at least B2 level) as well as good English skills (at least B2 level) in spoken and written form