Staff Cybersecurity & OT Security Engineer

Oxydata Software Sdn Bhd; Penang; On-site; MYR 180,000 - 240,000; Full time

Job summary

Oxydata Software Sdn Bhd is seeking a senior hands-on Staff Cybersecurity & OT Security Engineer to manage day-to-day security operations across enterprise IT and manufacturing/OT environments. This individual-contributor role requires investigation of alerts, incident response, vulnerability management, and risk assessment, with occasional travel to Korea and India.

You will personally investigate security alerts, respond to incidents, manage vulnerabilities, and support OT/ICS security

Qualifications

• 8+ years of information security experience in IT/security operations.
• At least 3 years in a senior hands-on individual-contributor role.
• Must have performed security investigations within the last 24 months.
• Hands-on incident response across validation, containment, eradication and recovery.
• Hands-on EDR/XDR alert triage and investigation experience.
• Experience in manufacturing/industrial/OT/ICS/SCADA security exposures.
• Working knowledge of ISO/IEC 27001, NIST CSF and IEC 62443.
• Fluent English and eligible to work in Malaysia.

Responsibilities

• Perform daily cybersecurity operations and threat triage.
• Investigate EDR/XDR alerts, including hash analysis and false positives.
• Monitor critical OT security events and respond to incidents.
• Handle security incidents from validation to post-incident reporting.
• Manage vulnerability reviews, risk-based prioritization and remediation tracking.
• Maintain security risk registers and support ISO 27001 readiness and audits.
• Review security aspects of OT/production network changes.
• Support OT network segmentation and monitoring improvements per IEC 62443.
• Lead security awareness and phishing simulations.
• Support third-party security assessments and pen-testing.

Skills

Incident response

EDR/XDR

Vulnerability management

OT/ICS/SCADA security

Threat intelligence

ISO/IEC 27001

NIST CSF

IEC 62443

CrowdStrike Falcon

SecureWorks Taegis

Microsoft 365 security

Tools

CrowdStrike Falcon

SecureWorks Taegis

Microsoft 365 security

Job description

Staff Cybersecurity & OT Security Engineer

Staff Cybersecurity & OT Security Engineer

Location

Penang, Malaysia — 5 Days Onsite
Occasional travel to Korea and India may be required.

About the Role

We are looking for a senior, hands‑on Cybersecurity & OT Security Engineer to manage day‑to‑day security operations across enterprise IT and manufacturing/OT environments.

This is an individual‑contributor role, not a security management position. The successful candidate will personally investigate security alerts, respond to incidents, manage vulnerabilities, assess security risks, and support OT/ICS security activities.

Responsibilities

Perform daily cybersecurity operations, including threat‑intelligence triage and investigation.

Investigate EDR/XDR alerts, including hash analysis, execution‑path analysis and false‑positive determination.

Monitor critical OT security events.

Personally handle security incidents covering validation, containment, eradication, recovery and post‑incident reporting.

Manage vulnerability reviews, risk‑based prioritisation and remediation tracking.

Maintain security risk registers and support ISO/IEC 27001 readiness and audit activities.

Review security aspects of changes affecting OT and production networks.

Support OT network segmentation and monitoring improvements aligned with IEC 62443.

Manage security awareness activities and phishing simulations.

Support third‑party security assessments and penetration‑testing engagements.

Develop and maintain security policies, incident‑response plans, runbooks and security documentation.

Requirements

Must Have

8+ years of information security experience, including at least 3 years in a senior hands‑on individual‑contributor security operations role.

Must have personally performed security investigation work within the last 24 months.

Strong hands‑on incident response experience covering validation, containment, evidence preservation, eradication and recovery.

Hands‑on EDR/XDR alert triage and investigation experience.

Hands‑on vulnerability management and risk‑based prioritisation experience.

Experience within manufacturing, industrial, energy or logistics environments, including OT/ICS/SCADA security exposure.

Working knowledge of ISO/IEC 27001, NIST CSF and IEC 62443.

Fluent English and eligible to work in Malaysia.

Nice to Have

Threat hunting experience.

Digital forensics and evidence‑capture experience.

Experience with CrowdStrike Falcon or SecureWorks Taegis.

Certifications such as GCIH, GCFA, GCIA, GICSP, OSCP or CISSP.

Experience managing third‑party penetration‑testing engagements.

Experience working in an organisation without a dedicated SOC, where the engineer personally handled security response.

Azure / Microsoft 365 security exposure.

We are local 100% Malaysian‑owned MSC status company established in 2006 serving ASEAN region. Our core competencies are in IT Managed Services, Dev/Ops, Outsourcing, Analytics development services, and Microsoft Platform development such as SharePoint, Power Platform, Dynamics CRM, and .NET/Mobile Application development. We help our clients to realize their results through digital transformation using our innovative IT services and software solutions.

We are local 100% Malaysian‑owned MSC status company established in 2006 serving ASEAN region. Our core competencies are in IT Managed Services, Dev/Ops, Outsourcing, Analytics development services, and Microsoft Platform development such as SharePoint, Power Platform, Dynamics CRM, and .NET/Mobile Application development. We help our clients to realize their results through digital transformation using our innovative IT services and software solutions.