Information security Engineering specialist

BP p.l.c.; Malaysia; Hybrid; MYR 100,000 - 150,000; Full time

Job summary

BP p.l.c. is seeking a Security Engineering Specialist in Malaysia. This role involves building secure systems while collaborating with cross-functional teams to implement security standards in cloud and data platforms. Ideal candidates should have extensive cybersecurity experience and a strong background in creating secure architectures. Join BP for a rewarding environment with excellent benefits, career development opportunities, and commitment to diversity.

Benefits

Life and health insurance

Flexible working options

Great work-life balance

Tremendous learning and development opportunities

Qualifications

• 3+ years of cybersecurity experience required.
• Experience with cloud platforms like AWS or Azure.
• Hands-on skills in at least one programming language.

Responsibilities

• Develop and implement security standards and strategies.
• Collaborate with teams to support secure product delivery.
• Identify opportunities for automating security processes.

Skills

Cybersecurity

Automation

Communication

Risk Management

Information Security

Education

Bachelor's degree in Information Technology or related field

Tools

AWS

Azure

Python

Java

C#

Job description

• Information security Engineering specialist

Information security Engineering specialist

Information security Engineering specialist

• Travel required Negligible travel should be expected with this role
• Job category IT&S Group
• Relocation available This role is not eligible for relocation

As aSecurity Engineering Specialist, you will play a key role in enabling teams to build secure systems, write secure code, and embed security standards throughout the development lifecycle. You’ll partner with engineers and security professionals to design and implement secure architectures, drive automation, and ensure compliance across cloud, infrastructure, and data platforms.

You will actively contribute to the evolution of bp’s security posture, helping teams uncover and remediate vulnerabilities, adopt secure-by-default practices, and stay ahead of emerging threats and technology trends.

You'll be part of a highly skilled team responsible for identifying, mitigating, and responding to cyber threats across bp's global digital landscape. This team leverages intelligence-led strategies and data-driven insights to improve response processes and continuously strengthen bp’s cybersecurity infrastructure.

What You’ll Deliver

• Develop and implement platform security standards, co-create schemas, and ensure secure infrastructure builds from the ground up.
• Identify opportunities to automate manual security processes and improve efficiency.
• Collaborate with cross-functional teams to implement security strategies and support secure product delivery.
• Provide hands-on support and expertise in at least one area: cloud, infrastructure, or data security.
• Guide secure configuration practices and remediation planning.
• Align security practices and decisions across technical teams and stakeholders.
• Contribute to a positive governance framework, working inclusively with developers, engineers, product managers, and other collaborators.
• Help evolve and shape the security roadmap to anticipate future risks and requirements.
• Create clear documentation and materials to help teams measure and implement security in cloud, infrastructure, or data environments.
• Mentor team members and foster a culture of continuous learning and development.

Required Skills & Experience

• Proven experience in security engineering or technical infrastructure roles.
• At least 3 years of cybersecurity experience in one or more domains:
• Hands-on experience designing scalable, secure architectures across cloud and data platforms.
• Proficient in at least one object-oriented programming language (e.g., Python, Java, C#, Scala).
• Familiarity with cloud environments such as AWS, Azure, or Alibaba.
• Exposure to full-stack development and modern development practices.
• Experience automating security tasks using Infrastructure-as-Code (IaC), CI/CD pipelines, and scripting tools.
• Knowledge of security tools and technologies such as CNAPP, vulnerability scanners, endpoint protection, and DLP solutions.
• Strong understanding of the full data lifecycle and associated security practices.
• Familiarity with key compliance frameworks and regulations (PCI-DSS, GDPR, CCPA, SOX).
• Strong collaboration and communication skills with the ability to influence and guide teams.

Why join our team?

At bp, we provide an excellent working environment and employee benefits such as an open and inclusive culture, a great work-life balance, tremendous learning and development opportunities to craft your career path, life and health insurance, medical care package and many others.

We support our people to learn and grow in a diverse and challenging environment. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

Reinvent your career as you help our business meet the challenges of the future.

Apply now!

Travel Requirement

Negligible travel should be expected with this role

Job summary

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

As aSecurity Engineering Specialist, you will play a key role in enabling teams to build secure systems, write secure code, and embed security standards throughout the development lifecycle. You’ll partner with engineers and security professionals to design and implement secure architectures, drive automation, and ensure compliance across cloud, infrastructure, and data platforms.

You will actively contribute to the evolution of bp’s security posture, helping teams uncover and remediate vulnerabilities, adopt secure-by-default practices, and stay ahead of emerging threats and technology trends.

You'll be part of a highly skilled team responsible for identifying, mitigating, and responding to cyber threats across bp's global digital landscape. This team leverages intelligence-led strategies and data-driven insights to improve response processes and continuously strengthen bp’s cybersecurity infrastructure.

What You’ll Deliver

• Develop and implement platform security standards, co-create schemas, and ensure secure infrastructure builds from the ground up.
• Identify opportunities to automate manual security processes and improve efficiency.
• Collaborate with cross-functional teams to implement security strategies and support secure product delivery.
• Provide hands-on support and expertise in at least one area: cloud, infrastructure, or data security.
• Guide secure configuration practices and remediation planning.
• Align security practices and decisions across technical teams and stakeholders.
• Contribute to a positive governance framework, working inclusively with developers, engineers, product managers, and other collaborators.
• Help evolve and shape the security roadmap to anticipate future risks and requirements.
• Create clear documentation and materials to help teams measure and implement security in cloud, infrastructure, or data environments.
• Mentor team members and foster a culture of continuous learning and development.

Required Skills & Experience

• Proven experience in security engineering or technical infrastructure roles.
• At least 3 years of cybersecurity experience in one or more domains:
• Cloud(AWS, Azure)
• Infrastructure(IAM, network, endpoint)
• Data(DLP, data lifecycle management)
• Hands-on experience designing scalable, secure architectures across cloud and data platforms.
• Proficient in at least one object-oriented programming language (e.g., Python, Java, C#, Scala).
• Familiarity with cloud environments such as AWS, Azure, or Alibaba.
• Exposure to full-stack development and modern development practices.
• Experience automating security tasks using Infrastructure-as-Code (IaC), CI/CD pipelines, and scripting tools.
• Knowledge of security tools and technologies such as CNAPP, vulnerability scanners, endpoint protection, and DLP solutions.
• Strong understanding of the full data lifecycle and associated security practices.
• Familiarity with key compliance frameworks and regulations (PCI-DSS, GDPR, CCPA, SOX).
• Strong collaboration and communication skills with the ability to influence and guide teams.
• A proactive, continuous improvement mindset.

Why join our team?

At bp, we provide an excellent working environment and employee benefits such as an open and inclusive culture, a great work-life balance, tremendous learning and development opportunities to craft your career path, life and health insurance, medical care package and many others.

We support our people to learn and grow in a diverse and challenging environment. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly.

There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

Reinvent your career as you help our business meet the challenges of the future.

Apply now!

Travel Requirement

Negligible travel should be expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status.Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process,please contact us .

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.