Application Security Specialist

Overview

bp Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Join to apply for the Application Security Specialist role at bp

This team drives the response and management of cyber incidents, using an intelligence‑led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, they establish engineering principles and enhance the technology stack to continuously bolster bp's cybersecurity posture.

Responsibilities

• Provide technical expertise in support of information security and risk activities specific to the specialism to achieve objectives e.g. designing and developing security solutions to work across bp’s digital environments that are consistent with current policies.
• Maintain and improve API security controls and practices across the SDLC to help software engineering teams create products secure by design.
• Perform security reviews of API designs, specifications (e.g. Open API / Swagger), and source code to identify and remediate vulnerabilities.
• Develop and promote guidelines for secure API and cloud‑native applications.
• Maintain systems that are designed to uncover code vulnerabilities and provide remediation insights.
• Integrate security processes, including threat modeling.
• Collaborate with DevOps / CI / CD teams to shift left on security : integrate API security testing (static & dynamic), automated vulnerability scanning, and policy enforcement into the pipeline.
• Enforce secure design patterns for APIs (including REST, SOAP) and advocate for least privilege, data minimization, segmentation of access.
• Deliver the implementation and application of relevant operating processes and procedures, and ensure all activities adhere to the relevant standards.
• Monitor and maintain logging, alerting, and telemetry for APIs; respond to incidents, API misuse, and anomalous behavior.
• Create and maintain API security standards, policies, and guidelines.
• Evolve the security roadmap to meet anticipated future requirements and needs.
• Create and articulate materials on how to embed and measure security throughout the software and platform development lifecycle.
• Develop and maintain a series of internal and external collaborator relationships, delivering advanced technical knowledge to support project delivery, cooperatively identify key challenges and ensure that security solutions successfully protect bp against cyber risks.

Qualifications

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can grow and succeed. Join bp and become part of the team building our future!

Accommodation

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Oil and Gas

#J-18808-Ljbffr