About us

At Exxon Mobil, our vision is to lead in energy innovations that advance modern living and a net-zero future. As one of the world’s largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for.

The success of our Upstream, Product Solutions and Low Carbon Solutions businesses is the result of the talent, curiosity and drive of our people. They bring solutions every day to optimize our strategy in energy, chemicals, lubricants and lower-emissions technologies.

We invite you to bring your ideas to Exxon Mobil to help create sustainable solutions that improve quality of life and meet society’s evolving needs. Learn more about our What and our Why and how we canwork** together**.

Exxon Mobil in Malaysia

In Malaysia, we host a global business and technology center in Kuala Lumpur that provides high-level information technology and engineering expertise to Exxon Mobil’s Upstream, Product Solutions and Low Carbon Solutions businesses worldwide. In the upstream, we have interests in two Production Sharing Contracts with PETRONAS, while in the Product Solutions business, we supply a portfolio of specialty chemical products to the marketplace.

What role you will play in our team

Cyber Security is responsible for identifying, detecting, protecting against, and responding to cyber threats and attacks targeting Exxon Mobil’s digital assets, both on-premises and in the cloud. This is a multifaceted discipline that demands strong collaboration, a broad technical understanding of EMIT services and platforms, familiarity with common network functions and protocols, and insight into adversarial techniques. This role also requires effective communication skills and a natural curiosity about how technology works. The role is based in Menara Exxon Mobil, Kuala Lumpur.

What you will do

• Conduct and document time-sensitive cyber security incident management and threat response.

• Identify and mitigate indicators of compromise and Advanced Persistent Threat activities (APT).

• Participate in 24/7 SOC on-call shift rotations.

• Develop and maintain playbooks which provide an investigation guideline.

• Assist in the development, documentation and maintenance of new Alert and Detection Strategies (ADS) focused on tactics, techniques and procedures (TTP).

• Support cyber security escalation teams.

About you Skills and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).

• Relevant certifications preferred (e.g. GIAC GCFA, GCIA, GCIH, OSCP, CEH, CISSP).

• 3+ years of experience in cybersecurity investigations, incident response, or a related field.

• Hands-on experience with forensic analysis, threat hunting, or malware analysis.

• Experience working in enterprise environments with complex IT infrastructures.

Preferred Qualifications/ Experience

• Experience conducting in-depth security investigations, including root cause analysis and incident response.

• Ability to proactively hunt threats using intelligence, behavioral analytics, and anomaly detection.

• Skilled in using SIEM and EDR tools (e.g. Splunk, Crowd Strike) for monitoring and analysis.

• Strong grasp of network protocols such as TCP/IP, DNS, and HTTP/S.

• Understanding of cloud security controls and incident response (e.g. AWS, Azure, GCP).

• Proficient with forensic tools for analyzing compromised systems, memory, and network traffic.

• Familiarity with static and dynamic malware analysis to assess behavior and impact.

• Hands-on experience with simulated attacks to identify vulnerabilities and evaluate defenses.

• Experience in application vulnerability testing, including identifying and validating security flaws.

• Scripting ability (e.g. Python, PowerShell) to automate investigations and data analysis.

• Clear documentation and communication of findings to both technical and non-technical audiences.

Your Benefits:

We are committed to providing benefits that are competitive and support the needs of our employees.

Application Process

Please be informed that only shortlisted candidates will be notified, and you can find out more about our hiring process here.

For more information about business solicitation and recruiting scams, please click here.

We thank you for your interest in Exxon Mobil.

Stay connected with us
Follow us on LinkedIn or subscribe to our channel at YouTubeEqual Opportunity Employer
Exxon Mobil is an Equal Opportunity Employer. All qualified applicants will be duly considered for employment.

Voted Top 5 Graduates’ Choice of Employers in Malaysia for Oil and Gas category

Nothing herein is intended to override the corporate separateness of local entities. Working relationships discussed herein do not necessarily represent a reporting connection, but may reflect a functional guidance, stewardship, or service relationship.

Exxon Mobil Corporation has numerous affiliates, many with names that include Exxon Mobil, Exxon, Esso and Mobil. For convenience and simplicity, those terms and terms like corporation, company, our, we and its are sometimes used as abbreviated references to specific affiliates or affiliate groups. Abbreviated references describing global or regional operational organizations and global or regional business lines are also sometimes used for convenience and simplicity. Similarly, Exxon Mobil has business relationships with thousands of customers, suppliers, governments, and others. For convenience and simplicity, words like venture, joint venture, partnership, co-venturer, and partner are used to indicate business relationships involving common activities and interests, and those words may not indicate precise legal relationships.