Quality Assurance-Jobs in Malaysia

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World. To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

We’re looking for a versatile, tool-agnostic security engineer who bridges the gap between SecOps, policy engineering, and automation. You’ll be the kind of person who understands how alerts are generated and what a good detection looks like - but your job is to build, tune, and optimize the tools and policies that enable those detections. Think of yourself as the person who makes the SOC’s life easier without needing to sit in the chair.

This is an engineering-heavy role for someone who’s comfortable working across policy, code, and cloud automation - and who knows when a Logic App beats a spreadsheet.

• Review and tune security policies and controls across enterprise-grade tools (threat intelligence platforms, email security systems, Microsoft Defender suite, data governance and compliance tools).
• Write, adjust, and maintain detection logic, suppression rules, and risk-based policies.
• Develop and automate security workflows using Python (e.g., Jupyter Notebooks for automation, reporting, or data analysis).
• Build cloud-native security automation workflows using Azure Logic Apps, Azure Functions, REST APIs, and webhooks.
• Implement “security as code” principles, integrating security into CI/CD pipelines.
• Translate security requirements into technical implementations, collaborating with cloud, compliance, and security operations teams.
• Maintain strong documentation and clear communication of security initiatives.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related fields.
• At least 3 years of relevant experience in security operations, security engineering, or DevSecOps roles.
• Deep expertise in security platforms and policy management.
• Solid understanding of SecOps concepts: alerting, incident lifecycle, detection logic, and response workflows.
• Proficiency in Python and automation tools.
• Experience with cloud-native tools (Azure Logic Apps, Azure Functions).
• Knowledge of CI/CD processes and security automation best practices.
• Strong cross-functional collaboration skills.
• Strategic mindset and critical thinking ("don’t just check the box" attitude).
• High proficiency in English (both written and spoken).

• Market-leading annual performance bonus (subject to eligibility).
• Benefits vary by country and include diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives.
• Access to online learning platforms and personalized growth programs to nurture leadership skills.
• Committed to continuous improvement within a transformative environment, preparing for ongoing changes.

We’re one of the few companies named as a Global Top Employer by the Top Employers Institute. Collaboration, inclusion, and partnership underpin everything we do. We embrace talent from all backgrounds and support professionals through programs like The Global Returners program. Learn more about our culture and employee experience here. If you require reasonable adjustments during recruitment, notify us and we will arrange appropriate accommodations.