Senior IT & OT Security Engineer

Enovix Corporation; Malaysia; On-site; MYR 180,000 - 280,000; Full time

Job summary

Enovix Corporation seeks a highly experienced Staff IT, Cybersecurity & OT to strengthen security across enterprise IT, manufacturing environments, applications, and data. This senior, hands-on role assesses cyber risk, designs controls, monitors threats, investigates incidents, and scales security across a global organization.

You will collaborate with IT, engineering, manufacturing, facilities, products, legal, and business teams to implement security by design and operation.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering or related field, or equivalent experience.
• 6+ years of progressive experience in cybersecurity, security engineering, or security operations.
• Hands-on experience securing enterprise IT (networks, endpoints, servers, applications, identity, cloud).
• Strong grasp of threat models, attack techniques, and defense-in-depth.
• Experience with SIEM, EDR/XDR, network detection, vulnerability management, and logs.
• Experience investigating incidents, including containment and root-cause analysis.
• Familiarity with OT/ICS security and risk-based compliance standards.

Responsibilities

• Conduct security architecture reviews and provide risk-based guidance across IT, cloud, application, network, manufacturing, and OT initiatives.
• Define security requirements and technical controls based on system criticality and business risk.
• Partner with IT, engineering, and manufacturing teams to embed security across the technology lifecycle.
• Design and maintain controls protecting confidentiality, integrity, and availability.
• Evaluate and help deploy security tools across environments.
• Review network architecture for segmentation, access control, remote access, and resilience.
• Advise on IAM, endpoint, network, cloud, data protection, and vulnerability management.
• Assess security posture across corporate IT and manufacturing OT (ICS, production networks, connected equipment, workstations).
• Identify gaps and coordinate remediation with system owners.
• Develop controls suited to manufacturing constraints (safety, availability, production continuity).
• Support IT/OT segmentation, asset visibility, privileged access, and monitoring.
• Review changes to manufacturing systems for cyber and operational risk.
• Work with vendors and internal teams on production system security.
• Maintain familiarity with the Purdue Model, NIST SP 800-82, and ISA/IEC 62443.
• Monitor and analyze security events, logs, and threat intelligence to identify incidents.
• Improve detection logic, dashboards, and escalation procedures.
• Investigate using SIEM, EDR, network monitoring, identity, and cloud tools.
• Perform root-cause analysis and control validation.
• Support threat hunting across IT, cloud, and OT environments.
• Conduct assessments and technical risk analyses across IT and OT.
• Prioritize findings by exploitability, criticality, and business impact.
• Drive remediation with system owners and validate outcomes.
• Support penetration testing and independent assessments.
• Help develop hardening standards and secure configuration baselines.
• Serve as a senior technical member of the IR team across IT, cloud, application, network, and OT incidents.
• Coordinate triage, containment, eradication, recovery, and evidence collection.
• Perform root-cause analysis and recommend corrective actions.
• Maintain and test IR plans, playbooks, and communication workflows.
• Participate in tabletop exercises and coordinate with stakeholders and external providers during major incidents.
• Review security of third-party technologies, vendors, and manufacturing equipment, including data flows, access, and integration methods.
• Identify third-party risks and recommend controls.
• Work with procurement, legal, and business owners to address security requirements before implementation or renewal.
• Support compliance programs aligned to NIST, ISO 27001, SOC 2, SOX, and OT standards.
• Translate requirements into practical controls.
• Produce clear assessment reports, standards, and operational playbooks.
• Support audits, customer reviews, and regulatory assessments.
• Track security metrics and stay current on threats, technologies, and regulations.

Skills

Security architecture & engineering

Threat modeling

SIEM/EDR/XDR

OT security

Cloud security (AWS/Azure/GCP)

Vulnerability management

Incident response

Governance & compliance

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering

Tools

SIEM

EDR/XDR

Network detection

Vulnerability management

Log management

Job description

Enovix Corporation seeks a highly experienced Staff IT, Cybersecurity & OT to strengthen security across enterprise IT, manufacturing environments, applications, and data. This senior, hands-on role assesses cyber risk, designs controls, monitors threats, investigates incidents, and scales security across a global organization.

You will collaborate with IT, engineering, manufacturing, facilities, products, legal, and business teams to implement security by design and operation.