Cyber Security Investigator
Sign up free to see how well your resume matches this role.
What you'll do
- Conduct and document time-sensitive cyber security incident management and threat response.
- Identify and mitigate indicators of compromise and Advanced Persistent Threat activities (APT).
- Participate in 24/7 SOC on-call shift rotations.
- Develop and maintain playbooks which provide an investigation guideline.
- Assist in the development, documentation and maintenance of new Alert and Detection Strategies (ADS) focused on tactics, techniques and procedures (TTP).
- Support cyber security escalation teams.
What they're looking for
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
- Relevant certifications preferred (e.g. GIAC GCFA, GCIA, GCIH, OSCP, CEH, CISSP).
- 3+ years of experience in cybersecurity investigations, incident response, or a related field.
- Hands-on experience with forensic analysis, threat hunting, or malware analysis.
- Experience working in enterprise environments with complex IT infrastructures.
Nice to have
- Experience conducting in-depth security investigations, including root cause analysis and incident response.
- Ability to proactively hunt threats using intelligence, behavioral analytics, and anomaly detection.
- Skilled in using SIEM and EDR tools (e.g. Splunk, CrowdStrike) for monitoring and analysis.
- Strong grasp of network protocols such as TCP/IP, DNS, and HTTP/S.
- Understanding of cloud security controls and incident response (e.g. AWS, Azure, GCP).
- Proficient with forensic tools for analyzing compromised systems, memory, and network traffic.
- Familiarity with static and dynamic malware analysis to assess behavior and impact.
- Hands-on experience with simulated attacks to identify vulnerabilities and evaluate defenses.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
About us
At ExxonMobil, our vision is to lead in energy innovations that advance modern living and a net-zero future. As one of the world’s largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for.
The success of our Upstream, Product Solutions and Low Carbon Solutions businesses is the result of the talent, curiosity and drive of our people. They bring solutions every day to optimize our strategy in energy, chemicals, lubricants and lower-emissions technologies.
We invite you to bring your ideas to ExxonMobil to help create sustainable solutions that improve quality of life and meet society’s evolving needs. Learn more about our What and our Why and how we can work together.
ExxonMobil in Malaysia
In Malaysia, we host a global business and technology center in Kuala Lumpur that provides high-level information technology and engineering expertise to ExxonMobil’s Upstream, Product Solutions and Low Carbon Solutions businesses worldwide. In the upstream, we have interests in two Production Sharing Contracts with PETRONAS, while in the Product Solutions business, we supply a portfolio of specialty chemical products to the marketplace.
What role you will play in our team
Cyber Security is responsible for identifying, detecting, protecting against, and responding to cyber threats and attacks targeting ExxonMobil’s digital assets, both on-premises and in the cloud. This is a multifaceted discipline that demands strong collaboration, a broad technical understanding of EMIT services and platforms, familiarity with common network functions and protocols, and insight into adversarial techniques. This role also requires effective communication skills and a natural curiosity about how technology works. The role is based in Menara ExxonMobil, Kuala Lumpur.
What you will do
- Conduct and document time-sensitive cyber security incident management and threat response.
- Identify and mitigate indicators of compromise and Advanced Persistent Threat activities (APT).
- Participate in 24/7 SOC on-call shift rotations.
- Develop and maintain playbooks which provide an investigation guideline.
- Assist in the development, documentation and maintenance of new Alert and Detection Strategies (ADS) focused on tactics, techniques and procedures (TTP).
- Support cyber security escalation teams.
About you
Skills and Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
- Relevant certifications preferred (e.g. GIAC GCFA, GCIA, GCIH, OSCP, CEH, CISSP).
- 3+ years of experience in cybersecurity investigations, incident response, or a related field.
- Hands-on experience with forensic analysis, threat hunting, or malware analysis.
- Experience working in enterprise environments with complex IT infrastructures.
Preferred Qualifications/ Experience
- Experience conducting in-depth security investigations, including root cause analysis and incident response.
- Ability to proactively hunt threats using intelligence, behavioral analytics, and anomaly detection.
- Skilled in using SIEM and EDR tools (e.g. Splunk, CrowdStrike) for monitoring and analysis.
- Strong grasp of network protocols such as TCP/IP, DNS, and HTTP/S.
- Understanding of cloud security controls and incident response (e.g. AWS, Azure, GCP).
- Proficient with forensic tools for analyzing compromised systems, memory, and network traffic.
- Familiarity with static and dynamic malware analysis to assess behavior and impact.
- Hands-on experience with simulated attacks to identify vulnerabilities and evaluate defenses.
- Experience in application vulnerability testing, including identifying and validating security flaws.
- Scripting ability (e.g. Python, PowerShell) to automate investigations and data analysis.
- Clear documentation and communication of findings to both technical and non-technical audiences.
Your Benefits:
We are committed to providing benefits that are competitive and support the needs of our employees.
Application Process
Please be informed that only shortlisted candidates will be notified, and you can find out more about our hiring process here.
For more information about business solicitation and recruiting scams, please click here.
We thank you for your interest in ExxonMobil.
Stay connected with us
Follow us on LinkedIn or subscribe to our channel at YouTube
Equal Opportunity Employer
ExxonMobil is an Equal Opportunity Employer. All qualified applicants will be duly considered for employment.
Voted Top 5 Graduates’ Choice of Employers in Malaysia for Oil and Gas category
Nothing herein is intended to override the corporate separateness of local entities. Working relationships discussed herein do not necessarily represent a reporting connection, but may reflect a functional guidance, stewardship, or service relationship.
Exxon Mobil Corporation has numerous affiliates, many with names that include ExxonMobil, Exxon, Esso and Mobil. For convenience and simplicity, those terms and terms like corporation, company, our, we and its are sometimes used as abbreviated references to specific affiliates or affiliate groups. Abbreviated references describing global or regional operational organizations and global or regional business lines are also sometimes used for convenience and simplicity. Similarly, ExxonMobil has business relationships with thousands of customers, suppliers, governments, and others. For convenience and simplicity, words like venture, joint venture, partnership, co-venturer, and partner are used to indicate business relationships involving common activities and interests, and those words may not indicate precise legal relationships.
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.