Information Security Engineering Specialist

-; Kuala Lumpur; Hybrid; MYR 90,000 - 120,000; Full time

Job summary

A leading energy company is seeking an Information Security Engineering Specialist to enhance cybersecurity. You will develop security standards, collaborate with teams, and act as a subject matter expert across cloud and data security. The ideal candidate has 3+ years of security engineering experience. This role offers a hybrid work model and robust employee benefits, including a commitment to diversity and continuous learning.

Benefits

Flexible working options

Life and health insurance

Medical care package

Qualifications

• 3+ years in security engineering or technical infrastructure roles.
• Minimum 3 years of cybersecurity experience focused on Cloud (AWS, Azure), Infrastructure (IAM, networking), or Data (DLP).
• Hands-on experience designing scalable, secure architectures for data infrastructure.

Responsibilities

• Develop and implement platform security standards and co-design security schemas.
• Collaborate with business partners to implement security strategies.
• Act as a subject matter expert in cloud, infrastructure, or data.

Skills

Automation system digital security

Incident management

Risk Management

Information Security

Secure development

Job description

Job Description

We are seeking an Information Security Engineering Specialist to support a dedicated team that empowers security professionals and software engineers to develop, deploy, and maintain security standards, secure applications, and automation solutions.

In this role, you will champion secure policies across cloud, infrastructure, and data teams, identify vulnerabilities, provide actionable remediation insights, and promote the adoption of robust security practices. Staying current on industry trends and technology advancements, you will play a vital role in strengthening bp's cybersecurity posture and fostering a culture of security excellence.

Join a dynamic team responsible for responding to and managing cyber incidents using an intelligence‑driven approach. This team focuses on identifying, mitigating, and rapidly responding to threats that protect bp on a global scale. Leveraging lessons learned and data analytics, they define engineering principles and continuously enhance bp's cybersecurity technology stack.

What You Will Deliver

• Develop and implement platform security standards and co‑design security schemas to ensure quality at the infrastructure build and configuration stage. Identify opportunities to automate manual security processes wherever feasible.
• Collaborate with business partners to implement security strategies and coordinate remediation efforts to ensure products meet safety and compliance requirements.
• Act as a subject matter expert in at least one core domain—cloud, infrastructure, or data.
• Provide hands‑on support to teams on secure configurations and remediation approaches.
• Align security strategy, processes, and decision‑making across multiple teams.
• Actively participate in governance frameworks and contribute to an inclusive, collaborative environment with engineers, developers, product owners, and managers.
• Drive the evolution of the security roadmap to anticipate and address future challenges.
• Offer technical guidance and manage dependencies and risks for squads and teams.
• Develop and communicate materials to help embed and measure security across cloud, infrastructure, and data environments.
• Mentor peers and promote continuous learning and professional development.

What You Will Need to Be Successful

Experience & Qualifications

• 3+ years in security engineering or technical infrastructure roles.
• Minimum 3 years of cybersecurity experience focused on one or more of these areas: Cloud (AWS, Azure), Infrastructure (IAM, networking,), or Data (DLP, data lifecycle management).
• Hands‑on experience designing scalable, secure architectures for data infrastructure, cloud, and data products in complex environments.
• Development experience in one or more object‑oriented languages such as Python, Scala, Java, or C#, and/or cloud development experience (AWS, Azure, Alibaba, etc.).
• Familiarity with full‑stack development.
• Proficiency with automation and scripting for security tasks, including infrastructure as code (IaC), CI/CD integration, and security tooling (e.g., vulnerability scanners, CNAPP, endpoint security, DLP).
• In‑depth knowledge of technologies covering all stages of the data lifecycle.
• Foundational understanding of security standards and regulations including PCI‑DSS, GDPR, CCPA, and SOX.
• Strong collaboration and influencing skills with the ability to guide teams through technical challenges.
• Commitment to continuous learning and improvement.

Why join our team?

At bp, we provide an excellent working environment and employee benefits such as an open and inclusive culture, a great work‑life balance, tremendous learning and development opportunities to craft your career path, life and health insurance, medical care package and many others. We support our people to learn and grow in a diverse and challenging environment. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly.

There are many aspects of our employees' lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

Reinvent your career as you help our business meet the challenges of the future.

Travel Requirement

Negligible travel should be expected with this role.

Relocation Assistance

This role is not eligible for relocation.

Remote Type

This position is a hybrid of office/remote working.

Skills

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism.

Legal Disclaimer

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp's recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending on your role, your employment may be contingent upon adherence to local policy. This may include pre‑placement drug screening, medical review of physical fitness for the role, and background checks.