Cyber Security Engineer

Daikin Holdings Singapore Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Daikin Holdings Singapore Pte Ltd invites a seasoned cybersecurity professional to lead security architecture for resource‑constrained embedded systems and BAS controllers in Singapore.

You will own vulnerability management, industrial cybersecurity conformances (IEC 62443), secure firmware practices (HUK, Secure Boot, TEE), and risk assessments across OT networks, coordinating with firmware teams and global governance.

Qualifications

• Degree in computer engineering, electrical/electronics, cybersecurity, or related field.
• 4–6 years in cybersecurity focused on embedded/IoT/OT systems.
• Experience with IEC 62443 conformity assessment.
• Knowledge of Secure Boot, TPM, TEE, SELinux.
• Understanding PKI, TLS/DTLS, device certificate provisioning; BACnet/SC.

Responsibilities

• Lead security architecture and best practices for embedded systems.
• Manage vulnerability triage, patches, and firmware coordination.
• Own industrial security certifications (IEC 62443).
• Advise on secure firmware design and key storage.
• Model threats and assess risks for connected devices and OT networks.
• Perform firmware security assessments and coordinate external testing.
• Align local engineering with global security governance.

Skills

Embedded security

Threat modeling

Vulnerability management

IEC 62443 knowledge

Secure boot

Education

Bachelors in Computer Engineering

Bachelors in Electrical Engineering

Bachelors in Cybersecurity

Tools

BACnet/SC

Secure Boot

TEE

TPM

PKI management

Job description

Responsibilities:

• Product Security Architecture & Best Practices: Establish, maintain, and enforce secure hardware and software development lifecycle practices tailored for resource-constrained embedded systems and BAS controllers.

• Vulnerability Management & Resolution: Actively triage, investigate, and resolve security vulnerabilities (hardware, firmware, and open-source components). Coordinate with firmware teams to implement, test, and deploy critical security patches.

• Security Certification Ownership: Lead the preparation, documentation, and technical execution required to achieve industrial security certifications, specifically IEC 62443 and regional cybersecurity standards.

• Secure Firmware Design & Implementation: Advise R&D teams on implementing robust security mechanisms at the device level, including Hardware Unique Keys (HUK), Secure Boot, cryptographic key storage, and trusted execution environments (TEE).

• Threat Modeling & Risk Assessment: Conduct proactive threat modeling, attack surface analysis, and risk assessments on connected devices and OT (Operational Technology) network protocol integrations (such as BACnet/SC).

• Penetration Testing & Auditing: Perform hands‑on firmware security assessments, static/dynamic code analysis (SAST/DAST), and coordinate with accredited external labs for official third‑party penetration testing and compliance auditing.

• Cross‑Border Technical Alignment: Act as the primary security liaison to align local engineering initiatives with our global corporation's security governance standards and architectural frameworks.

Requirements:

• Possess a recognized degree in Computer Engineering, Electrical/ Electronics Engineering, Cybersecurity, or a related technical discipline

• 4 to 6 years of hands‑on experience in cybersecurity, with focus on embedded systems, Internet of Things (IoT) devices, or Operational Technology (OT) systems.

• Industrial Cybersecurity Standards: Experience in navigating a product through an official conformity assessment. Having practical, working knowledge of the IEC 62443 is highly preferred.

• Embedded Technical Skills: Good understanding of low-level security implementations. This includes familiarity with Secure Boot, TPM, TEE, SELinux, and others.

• Security Infrastructure & Network: Good understanding of PKI (Public Key Infrastructure), key/cert management, device certificate provisioning, industrial network security, including TLS/DTLS implementation, and emerging secure protocols like BACnet/SC (Secure Connect).