Cyber Security Engineer

Daikin Malaysia Sdn Bhd

Subang Jaya

On-site

MYR 120,000 - 180,000

Full time

8 days ago

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Generous Leave Policies

Comprehensive Medical & Wellness Benef

Exclusive Employee Benefits

Job summary

Daikin Malaysia Sdn. Bhd. is seeking a seasoned cybersecurity professional to lead product security for embedded HVAC and OT devices.

You will shape secure development lifecycle practices, oversee vulnerability triage, and drive implementations of hardware security features such as Secure Boot, TPM, and TEE. You will collaborate with R&D to ensure IEC 62443 alignment, conduct threat modeling and risk assessments, coordinate third-party testing, and act as the security liaison across local and

Qualifications

Bachelor\u2019s degree in a relevant technical discipline.
4 to 6 years hands-on cybersecurity experience with embedded/OT/IoT.
Experience with IEC 62443 and product conformity assessment is preferred.
Experience with secure boot, TPM, TEE, SELinux or similar security features.
Good understanding of PKI, device provisioning, TLS/DTLS, and BACnet/SC.

Responsibilities

Establish, maintain, and enforce secure SDLC practices for embedded systems and BAS controllers.
Triage, investigate, and resolve security vulnerabilities across hardware, firmware, and open-source components.
Lead security certification efforts for IEC 62443 and regional standards.
Advise R&D on implementing robust device-level security controls (HUK, Secure Boot, cryptographic storage, TEE).
Conduct threat modeling and risk assessments for connected devices and OT network integrations.
Perform firmware security assessments, SAST/DAST, and coordinate with external labs for testing and audits.
Align local engineering initiatives with global security governance standards.

Skills

Embedded security

Threat modeling

Vulnerability management

Security certifications

Secure firmware design

OT/IoT security

Interdisciplinary collaboration

Education

Bachelor’s degree in Computer/Electrical/Electronics/Cybersecurity

Tools

SAST

DAST

Wireshark

TLS/DTLS

PKI

Secure Boot

TPM

TEE

BACnet/SC

Job description

Product Security Architecture & Best Practices: Establish, maintain, and enforce secure hardware and software development lifecycle practices tailored for resource-constrained embedded systems and BAS controllers.

Vulnerability Management & Resolution: Actively triage, investigate, and resolve security vulnerabilities (hardware, firmware, and open-source components). Coordinate with firmware teams to implement, test, and deploy critical security patches.

Security Certification Ownership: Lead the preparation, documentation, and technical execution required to achieve industrial security certifications, specifically IEC 62443 and regional cybersecurity standards.

Secure Firmware Design & Implementation: Advise R&D teams on implementing robust security mechanisms at the device level, including Hardware Unique Keys (HUK), Secure Boot, cryptographic key storage, and trusted execution environments (TEE).

Threat Modeling & Risk Assessment: Conduct proactive threat modeling, attack surface analysis, and risk assessments on connected devices and OT (Operational Technology) network protocol integrations (such as BACnet/SC).

Penetration Testing & Auditing: Perform hands-on firmware security assessments, static/dynamic code analysis (SAST/DAST), and coordinate with accredited external labs for official third-party penetration testing and compliance auditing.

Cross-Border Technical Alignment: Act as the primary security liaison to align local engineering initiatives with our global corporation's security governance standards and architectural frameworks.

Requirements

Education: Bachelor’s degree in Computer Engineering, Electrica l/ Electronics Engineering, Cybersecurity, or a related technical discipline.

Experience: 4 to 6 years of hands-on experience in cybersecurity, with focus on embedded systems, Internet of Things (IoT) devices, or Operational Technology (OT) systems.

Industrial Cybersecurity Standards: Experience in navigating a product through an official conformity assessment. Having practical, working knowledge of the IEC 62443 is highly preferred.

Embedded Technical Skills: Good understanding of low-level security implementations. This includes familiarity with Secure Boot, TPM, TEE, SELinux, and others.

Security Infrastructure & Network: Good understanding of PKI (Public Key Infrastructure), key/cert management, device certificate provisioning, industrial network security, including TLS/DTLS implementation, and emerging secure protocols like BACnet/SC (Secure Connect).

Security Testing and Tools: Comfortable with SAST & DAST, penetration testing tools, Wireshark and security testing frameworks.

Supplier & manufacturing security: Experience performing supplier security assessments, secure provisioning in manufacturing, and working with CM/EMS partners.

Language & Soft Skills: Strong analytical and problem-solving skills with a clear ability to explain complex security vulnerabilities to non-security engineers. Professional fluency in English is required.

Daikin Malaysia Sdn. Bhd. (DAMA), a leader in the HVAC‑R industry since 1974, represents trusted brands like Daikin and Acson. Specializing in manufacturing, innovation, and sales, DAMA delivers energy‑efficient HVAC solutions globally. Daikin R&D Malaysia Sdn. Bhd. (DRDM), Southeast Asia’s largest HVAC‑R R&D center since 1998, pioneers sustainable and high‑performance technologies. Through cutting‑edge research and global collaboration, DRDM drives innovation and promotes environmental sustainability.

Perks and benefits