Expression of Interest: Senior Security Automation Engineer

The British American Tobacco Group; Kuala Lumpur; On-site; MYR 80,000 - 110,000; Full time

Job summary

A leading global company in Kuala Lumpur is seeking a Senior Security Automation Engineer to lead security operations and enhance automation workflows using cloud tools and Python. The ideal candidate will have a background in security policy management, extensive experience in security engineering, and strong communication skills. This role offers a market-leading annual performance bonus and a flexible benefits package.

Benefits

Market-leading annual performance bonus

Diverse health plans

Online learning platforms

Qualifications

• At least 3 years of relevant experience in security operations or engineering.
• Deep expertise in security platforms and policy management.
• Proficiency in Python and automation tools.
• High proficiency in English (both written and spoken).

Responsibilities

• Review and tune security policies and controls across tools.
• Develop and automate security workflows using Python.
• Build cloud-native security automation workflows.
• Implement 'security as code' principles in CI/CD pipelines.

Skills

Security operations

Python automation

Cloud-native tools

Cross-functional collaboration

Strategic mindset

Incident lifecycle understanding

CI/CD processes

Education

Bachelor’s degree in Computer Science or related fields

Tools

Azure Logic Apps

Microsoft Defender suite

Job description

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World. To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

Senior Security Automation Engineer – Global Business Solutions

We’re looking for a versatile, tool-agnostic security engineer who bridges the gap between SecOps, policy engineering, and automation. You’ll be the kind of person who understands how alerts are generated and what a good detection looks like - but your job is to build, tune, and optimize the tools and policies that enable those detections. Think of yourself as the person who makes the SOC’s life easier without needing to sit in the chair.

This is an engineering-heavy role for someone who’s comfortable working across policy, code, and cloud automation - and who knows when a Logic App beats a spreadsheet.

Your key responsibilities will include:

• Review and tune security policies and controls across enterprise-grade tools (threat intelligence platforms, email security systems, Microsoft Defender suite, data governance and compliance tools).
• Write, adjust, and maintain detection logic, suppression rules, and risk-based policies.
• Develop and automate security workflows using Python (e.g., Jupyter Notebooks for automation, reporting, or data analysis).
• Build cloud-native security automation workflows using Azure Logic Apps, Azure Functions, REST APIs, and webhooks.
• Implement “security as code” principles, integrating security into CI/CD pipelines.
• Translate security requirements into technical implementations, collaborating with cloud, compliance, and security operations teams.
• Maintain strong documentation and clear communication of security initiatives.

What are we looking for?

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related fields.
• At least 3 years of relevant experience in security operations, security engineering, or DevSecOps roles.
• Deep expertise in security platforms and policy management.
• Solid understanding of SecOps concepts: alerting, incident lifecycle, detection logic, and response workflows.
• Proficiency in Python and automation tools.
• Experience with cloud-native tools (Azure Logic Apps, Azure Functions).
• Knowledge of CI/CD processes and security automation best practices.
• Strong cross-functional collaboration skills.
• Strategic mindset and critical thinking ("don’t just check the box" attitude).
• High proficiency in English (both written and spoken).

What we offer you?

• Market-leading annual performance bonus (subject to eligibility).
• Benefits vary by country and include diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives.
• Access to online learning platforms and personalized growth programs to nurture leadership skills.
• Committed to continuous improvement within a transformative environment, preparing for ongoing changes.

Why join BAT?

We’re one of the few companies named as a Global Top Employer by the Top Employers Institute. Collaboration, inclusion, and partnership underpin everything we do. We embrace talent from all backgrounds and support professionals through programs like The Global Returners program. Learn more about our culture and employee experience here. If you require reasonable adjustments during recruitment, notify us and we will arrange appropriate accommodations.