As a Smart Factory Security Engineer you will own the security of every solution onboarded into VTBA's Smart Factory and Industry 4.0 landscape, acting as the security gatekeeper and technical authority for new OT/IIoT systems, connected production equipment and digital manufacturing solutions from evaluation through production. You will embed security‑by‑design, maintain the OT security posture and asset inventory, support M&A due diligence and drive incident response, while collaborating with IT, network, production and external partners.
Responsibilities
- Own the security of every solution onboarded into VTBA's Smart Factory and Industry 4.0 landscape.
- Act as the security gatekeeper and technical authority for new OT/IIoT systems, connected production equipment, and digital manufacturing solutions from evaluation until full integration and production.
- Embed security by design into every onboarding by assessing risk, defining and enforcing hardening and segmentation requirements, validating secure architectures, and ensuring compliance with IEC 62443, NIS2, and internal security policy before and after go-live.
- Maintain an up‑to‑date OT/IIoT security posture and asset inventory (CMDB).
- Serve as the first point of contact for the business on security matters and ensure production processes are never compromised by unsecured or unmanaged systems.
- Support M&A and integration due diligence from a security standpoint, securing previously unregistered or newly acquired systems.
- Collaborate closely with IT, network, production, and external integration partners to guarantee a seamless and secure Industry 4.0 rollout.
- Drive root cause analysis and implement corrective and preventive measures in case of a security incident or outage tied to onboarded solutions.
- Develop the Smart Factory cybersecurity strategy aligned with business and security objectives.
- Design secure architectures for manufacturing systems, Industrial IoT (IIoT), MES, and OT networks.
- Own the security review and validation of all new OT/IIoT solutions being onboarded onto Smart Factory / production networks, from design through go‑live.
- Define and enforce security‑by‑design requirements (segmentation, hardening, access control, secure remote access) for new production lines, machines, and digital solutions.
- Be the first point of contact and internal security consultant for production engineers, IT teams, and solution vendors during onboarding projects.
- Maintain a secure and stable OT/IIoT environment for VTBA, including an accurate, continuously updated OT security asset inventory (CMDB).
- Support Smart Factory projects involving IoT, AI, cloud connectivity, predictive maintenance, and digital manufacturing platforms.
- Define and maintain OT asset inventories, security baselines, and lifecycle management processes.
- Conduct vulnerability assessments, security audits, and penetration testing of industrial systems.
- Act as the security contact for external production and integration partners, reviewing and validating the security quality of their work before systems connect to company networks.
- Drive compliance with IEC 62443, NIS2, ANSSI‑aligned practices, and internal IT/OT security regulations across all onboarded solutions.
- Perform regular on‑call duty for security‑related escalations on onboarded solutions.
Requirements
- 2+ years' experience securing OT/IIoT or Industry 4.0 environments.
- Solid knowledge of IEC 62443 and familiarity with NIS2 and other relevant OT/ICS cybersecurity frameworks.
- Strong understanding of network segmentation, secure remote access, and hardening practices for industrial and IIoT systems.
- Customer service skills (interaction with end users and solution vendors).
- ITIL process knowledge.
- Understanding of reporting & data visualization tools such as Microsoft Power BI and Excel.
- Advanced troubleshooting experience in OT/IIoT environments, including security log analysis (firewall, OT Defender, machine logs).
- Analytical skills – able to conduct security risk assessments and analyze log files to identify vulnerabilities and operational limitations.
- Reporting skills – able to summarize and present periodic security reports and recommend improvements to onboarding procedures.
- Planning skills – able to define security requirements and roadmaps for new solutions and production facilities.
- Excellent communication skills in English – written and verbal.
- Self‑organized and persistent in a polite way to obtain missing information from colleagues, business, and vendors.
- Willingness to undertake national and international business travel to support the secure rollout of new OT/IIoT solutions.
Benefits
- Modern and flexible work environment in a company that manufactures state‑of‑the‑art and innovative vacuum products and systems.
- Opportunity to be part of a young and international team supporting the latest technologies.
- Training and development opportunities to further your career.
- Flat organizational structures with direct contact between IT colleagues and internal customers.
- Deep insight into internal processes and projects of the company.
- Diverse by nature and inclusive by choice culture that values unique perspectives.
Additional details
- Our solutions are a key part of most industries – electronics, medical research, renewable energy, food production, infrastructure and many more.
- Working with us means working with the latest technologies and groundbreaking, sustainable innovations.
- Join us on our journey for a better tomorrow.
- Bright ideas come from all of us. The more unique perspectives we embrace, the more innovative we are. Together we build a culture where difference is valued and we share a deep sense of purpose and belonging.