Firmware Security & CI/CD Intern (Embedded Systems)

Keysight Technologies Malaysia Sdn. Bhd.; Penang; On-site; MYR 90,000 - 130,000; Full time

Job summary

Keysight Technologies Malaysia Sdn. Bhd. in Penang is seeking a firmware security engineer to help integrate security into our embedded software lifecycle.

You will work with firmware teams and use CI/CD pipelines to automate security scans and enforce secure boot and signing practices. The role involves developing scripts for vulnerability reporting, supporting EUCRA compliance activities, and collaborating across R&D to remediate risks early in development.

Qualifications

• Bachelor’s degree in Computer Engineering / Electrical Engineering / Computer Science / Embedded Systems.
• Basic knowledge of embedded systems or firmware development (C/C++ preferred).
• Familiar with CI/CD tools, version control (Git), and build systems.
• Understanding or interest in cybersecurity concepts (secure boot, encryption, vulnerability management).
• Programming/scripting skills (Python, Shell, C/C++).
• Strong analytical, problem-solving, and documentation skills.

Responsibilities

• Support integration of Black Duck and Polaris into firmware CI/CD autobuild pipeline.
• Develop and maintain scripts to automate security scanning, reporting, and build checks.
• Execute and monitor security scans; track and analyze vulnerability findings (critical/high/medium).
• Support EUCRA compliance activities.
• Assist in firmware security feature development and validation (e.g., bootloader, firmware signing).
• Support documentation, reporting, and evidence collection for SSDF / EUCRA compliance.
• Collaborate with firmware teams to identify and remediate security risks early in development.

Skills

Embedded Systems

C/C++

Python

CI/CD

Git

Security

SAST/SCA

Shell

Education

Bachelor’s degree in Computer Engineering / Electrical Engineering / Computer Science / Embedded Systems

Tools

Polaris

Black Duck

Job description

Keysight Technologies Malaysia Sdn. Bhd. in Penang is seeking a firmware security engineer to help integrate security into our embedded software lifecycle.

You will work with firmware teams and use CI/CD pipelines to automate security scans and enforce secure boot and signing practices. The role involves developing scripts for vulnerability reporting, supporting EUCRA compliance activities, and collaborating across R&D to remediate risks early in development.