About us
At ExxonMobil, our vision is to lead in energy innovations that advance modern living and a net-zero future. As one of the world’s largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for.
The success of our Upstream, Product Solutions and Low Carbon Solutions businesses is the result of the talent, curiosity and drive of our people. They bring solutions every day to optimize our strategy in energy, chemicals, lubricants and lower-emissions technologies.
We invite you to bring your ideas to ExxonMobil to help create sustainable solutions that improve quality of life and meet society’s evolving needs. Learn more about our What and our Why and how we can work together.
ExxonMobil in Malaysia
ExxonMobil is one of the world's largest publicly traded energy providers and chemical manufacturers, ExxonMobil develops and applies next-generation technologies to help safely and responsibly meet the world's growing needs for energy and high-quality chemical products.
In Malaysia, we are involved in significant oil and gas production operations and the marketing of chemical products. We also host a global business and technology center in Kuala Lumpur that provides high-level information technology and engineering expertise to ExxonMobil’s upstream, downstream and chemical businesses worldwide.
What role you will play in our team
Cyber Security is responsible for identifying, detecting, protecting against, and responding to cyber threats and attacks targeting ExxonMobil’s digital assets, both on-premises and in the cloud. This is a multifaceted discipline that demands strong collaboration, a broad technical understanding of EMIT services and platforms, familiarity with common network functions and protocols, and insight into adversarial techniques. This role also requires effective communication skills and a natural curiosity about how technology works. The role is based in Menara ExxonMobil, Kuala Lumpur.
What you will do
- Conduct and document time-sensitive cyber security incident management and threat response.
- Identify and mitigate indicators of compromise and Advanced Persistent Threat activities (APT).
- Participate in 24/7 SOC on-call shift rotations.
- Develop and maintain playbooks which provide an investigation guideline.
- Assist in the development, documentation and maintenance of new Alert and Detection Strategies (ADS) focused on tactics, techniques and procedures (TTP).
- Support cyber security escalation teams.
About you
Skills and Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
- Relevant certifications preferred (e.g. GIAC GCFA, GCIA, GCIH, OSCP, CEH, CISSP).
- 3+ years of experience in cybersecurity investigations, incident response, or a related field.
- Hands-on experience with forensic analysis, threat hunting, or malware analysis.
- Experience working in enterprise environments with complex IT infrastructures.
- Experience conducting in-depth security investigations, including root cause analysis and incident response.
- Ability to proactively hunt threats using intelligence, behavioral analytics, and anomaly detection.
Preferred Qualifications/ Experience
- Skilled in using SIEM and EDR tools (e.g. Splunk, CrowdStrike) for monitoring and analysis.
- Strong grasp of network protocols such as TCP/IP, DNS, and HTTP/S.
- Understanding of cloud security controls and incident response (e.g. AWS, Azure, GCP).
- Proficient with forensic tools for analyzing compromised systems, memory, and network traffic.
- Familiarity with static and dynamic malware analysis to assess behavior and impact.
- Hands-on experience with simulated attacks to identify vulnerabilities and evaluate defenses.
- Experience in application vulnerability testing, including identifying and validating security flaws.
- Scripting ability (e.g. Python, PowerShell) to automate investigations and data analysis.
- Clear documentation and communication of findings to both technical and non-technical audiences.
Your Benefits:
We are committed to providing benefits that are competitive and support the needs of our employees.
Application Process
Please be informed that only shortlisted candidates will be notified, and you can find out more about our hiring process here.
For more information about business solicitation and recruiting scams, please click here.
We thank you for your interest in ExxonMobil.
Stay connect with us
Learn more at our website
Subscribe our channel at YouTube
Equal Opportunity Employer
ExxonMobil is an Equal Opportunity Employer. All qualified applicants will be duly considered for employment.
Winner of Malaysia's 100 Leading Graduate Employers Award in the Energy/Oil and Gas/Utilities category
Nothing herein is intended to override the corporate separateness of local entities. Working relationships discussed herein do not necessarily represent a reporting connection, but may reflect a functional guidance, stewardship, or service relationship.
Exxon Mobil Corporation has numerous affiliates, many with names that include ExxonMobil, Exxon, Esso and Mobil. For convenience and simplicity, those terms and terms like corporation, company, our, we and its are sometimes used as abbreviated references to specific affiliates or affiliate groups. Abbreviated references describing global or regional operational organizations and global or regional business lines are also sometimes used for convenience and simplicity. Similarly, ExxonMobil has business relationships with thousands of customers, suppliers, governments, and others. For convenience and simplicity, words like venture, joint venture, partnership, co-venturer, and partner are used to indicate business relationships involving common activities and interests, and those words may not indicate precise legal relationships.
