Security application engineer

Daikin Europe; Gent; Hybride; EUR 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

Hybrid work 2 days per week

Training and onboarding support

Fringe benefits

Résumé du poste

Daikin Europe seeks a security engineer to contribute to security engineering activities and governance for its IoT cloud applications and distributed systems. You will perform security design reviews, threat modeling, and translate security requirements into practical controls with development teams.

The role includes vulnerability management, patching, audits, and regulatory compliance activities, plus participation in on-call rotations and continuous improvement across engineering teams, with

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or equivalent experience.
• Experience in application and/or cloud security (IoT or distributed system context).
• Good understanding of Web and API security (OWASP Top 10).
• Authentication/authorization mechanisms (OAuth2, OpenID Connect, JWT).
• Secure communication protocols (TLS, MQTT, HTTPS).
• Familiarity with cloud platforms (AWS, Azure, GCP) and their security services.
• Experience with secure software development practices and DevSecOps.

Responsabilités

• Perform security design reviews and threat modeling for new features and system changes.
• Identify, assess, and mitigate vulnerabilities in cloud services, APIs, and integrations.
• Translate security requirements into practical controls with development teams.
• Organise and follow up on penetration testing activities and ensure remediation.
• Define, implement, and improve security-related processes and procedures (vulnerability management, patching).
• Support audits, internal assessments, and regulatory compliance activities (e.g. CRA, NIS2).
• Contribute to security awareness and best practices within engineering teams.
• Support daily operations of IoT cloud applications, incident follow-up, and root cause analysis.
• Participate in on-call/standby rotations (future scope).

Connaissances

Security design reviews

Threat modeling

Vulnerability management

Cloud security

Web & API security

OAuth2/OpenID Connect/JWT

TLS/MQTT/HTTPS

DevSecOps

Penetration testing coordination

Incident response

Cross-functional collaboration

Formation

Bachelor's or Master’s in CS/Engineering

Outils

AWS

Azure

GCP

OWASP Top 10

Description du poste

You will contribute to both security engineering activitiesand process & compliance ownership:

Security engineering

• Perform security design reviewsand threat modeling(in cooperation with our suppliers) for new features and system changes
• Identify, assess, and mitigate vulnerabilities in:
• Cloud services and infrastructure
• APIs and integrations
• Supporting tooling, CI/CD pipelines, and development environments
• Translate security requirements into practical and implementable technical controlstogether with development teams
• Organise and follow up on penetration testing activities, ensuring findings are properly remediated

Processes and governance

• Define, implement, and continuously improve security-related processes and procedures, including:
• Vulnerability management and disclosure
• Secure software update and patch management
• Security documentation and evidence collection
• Support audits, internal assessments, ,and regulatory compliance activities(e.g. CRA, NIS2)
• Contribute to security awareness and best practiceswithin engineering teams

Operational support

• Support the daily operationsof our IoT cloud applications, including:
• Incident follow-up and root cause analysis
• Responding to service-related questions
• Supporting reliability and service continuity initiatives
• Participate in an on-call/standby rotation(future scope)

Your profile

Experience & knowledge

• Bachelor’s or Master’s degree in Computer Science, Engineering, or equivalent experience
• Experience in application and/or cloud security(preferably in an IoT or distributed system context)
• Good understanding of:
• Web and API security (e.g. OWASP Top 10)
• Authentication and authorization mechanisms (OAuth2, OpenID Connect, JWT, etc.)
• Secure communication protocols (TLS, MQTT, HTTPS)
• Familiarity with cloud platforms(e.g. AWS, Azure, or GCP) and their security services
• Experience with secure software development practicesand DevSecOps concepts

Nice to have

• Experience with IoT architecturesand device–cloud interactions
• Knowledge of European regulatory frameworks(CRA, RED-DA, NIS2)
• Experience with penetration testing coordinationor interpreting pentest reports
• Familiarity with standards such as ISO 27001, or similar
• Experience with risk-based frameworks (e.g. CIS controls)
• Experience with monitoring, logging, and incident response in cloud environments
• Strong analytical mindset and problem-solving skills
• Ability to translate abstract security requirements into practical solutions
• Good communication skills and ability to work with cross-functional teams
• Proactive attitude with a focus on continuous improvement

Our offer

This challenging position offers you growth opportunities at the European headquarters of global leading company. We offer a permanent contract for an indefinite period. From the start you can count on thorough training and intensive support. Your competitive salary is supplemented with an attractive package of fringe benefits.

Hybrid: You will have the possibility to work from home 2 days per week.