Cybersecurity Technologist (Kuala Lumpur, Federal Territory of Kuala Lumpur, MY, 50088)

About us For well over a century, ExxonMobil has been at the heart of creating and growing a modern world. We embrace the power and promise of technology, pushing the boundaries of what's possible. For billions around the world, lives are better and last longer because of the innovative problem solving and reliable energy we provide. And when it comes to developing industrial solutions to reduce carbon emissions, ExxonMobil is truly the leader. We don't stop at "good enough." We are committed to doing what's right, even if it's difficult or unpopular. We hold ourselves to high standards, challenge what's possible and invest in innovation to meet society's critical needs. Real change begins with bold questions, drive, and ambition. Here, your talent, determination and contributions shape how far you'll go and the impact you'll make along the way. Our future success depends on exceptional people. We invest in developing talent through meaningful work, challenging assignments, mentorship, and experiences that help build the next generation of leaders. Our Culture We are uniquely ExxonMobil. Integrity, care, excellence, resilience and courage, these core values determine how we work every day. At ExxonMobil, our values aren't just words— they're how we show up, focused on delivering the right answer, the right way, every day. ExxonMobil in Malaysia In Malaysia, we host a global business and technology center in Kuala Lumpur that provides high-level information technology and engineering expertise to ExxonMobil’s Upstream, Product Solutions and Low Carbon Solutions businesses worldwide. In the upstream, we have interests in two Production Sharing Contracts with PETRONAS, while in the Product Solutions business, we supply a portfolio of specialty chemical products to the marketplace. Job Group Capability Information Technology Job Group IT Enterprise Security What role you will play in the team The Cybersecurity Technologist - Advanced is responsible for identifying, detecting, protecting, and responding to cyber threats and attacks against the organization’s digital assets both on-premises and in the cloud. This role requires intermediate technical knowledge and experience starting to design, engineer, and manage the targeted security posture of the organization, ensuring the Confidentiality, Integrity, and Availability of its data. This role requires a intermediate technical understanding of common IT services and platforms, integrated systems and many other technical domains. This role provides a platform for developing advanced technical skills and participation in cybersecurity or network security projects, fostering increasing professional growth What you will do - Influence, implement and maintain security guidance / best practice, measures or controls to protect IT systems - Monitor, support, and investigate cyber security events and incidents - Support cyber and network security specific tools - Collaborate with other Teams to develop and enforce security best practices or security plans - Advocate for and raise awareness of cyber security - Conduct or consult / support vulnerability management and testing - Perform threat intelligence - Manage external network connections and develop firewall policies - Design and engineer cyber and network security solutions - Make adjustments to monitoring and alerting and code the changes in production - Collaborate with vendors to resolve operational issues About you Skills and Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience). Relevant certifications preferred (e.g. GIAC GCFA, GCIA, GCIH, OSCP, CEH, CISSP). 3+ years of experience in cybersecurity investigations, incident response, or a related field. Hands-on experience with forensic analysis, threat hunting, or malware analysis. Experience working in enterprise environments with complex IT infrastructures. Preferred Qualifications/ Experience Experience conducting in-depth security investigations, including root cause analysis and incident response. Ability to proactively hunt threats using intelligence, behavioral analytics, and anomaly detection. Skilled in using SIEM and EDR tools (e.g. Splunk, CrowdStrike) for monitoring and analysis. Strong grasp of network protocols such as TCP/IP, DNS, and HTTP/S. Understanding of cloud security controls and incident response (e.g. AWS, Azure, GCP). Proficient with forensic tools for analyzing compromised systems, memory, and network traffic. Familiarity with static and dynamic malware analysis to assess behavior and impact. Hands-on experience with simulated attacks to identify vulnerabilities and evaluate defenses. Experience in application vulnerability testing, including identifying and validating security flaws. Scripting ability (e.g. Python, PowerShell) to automate investigations and data analysis. Clear documentation and communication of findings to both technical and non-techni