Operational Security Management Specialist

Job Description

Entity: Innovation & Engineering Job Family Group: IT&S Group BP has embarked on an ambitious plan to modernize and transform as an integrated energy company, using digital technologies to drive efficiency, effectiveness, and new business models. As an Operational IS Specialist, you will be responsible for supportinginformation security and risk activities for Operational Security Management.The Security Operations Center is responsible for monitoring and responding to incidents, performing initial triage and response, and escalating serious threats to members of the Cyber Emergency Response Team (CERT) and the various business entities in BP.The SOC Analyst is the first point of contact many have with the Digital Security organization and therefore we also have an ambassadorial role in promoting Digital Security to the wider bp. As such, they must be knowledgeable about the various business segmentsand be able to answer, or direct to others, security-related questions covering a wide range of topics.Reporting to the SOC Lead Specialist in the UK, you will work as part of the global team to provide security across the enterprise that enables business activity and promotes safe and secure operations.Key Accountabilities:

• Provides sound technical expertise in support of information security and risk activities specific to the specialism and Security Operation Centre objectives e.g. Undertaking Incident detection and response activities; analyze and investigate security alertsand incidents with appropriate escalation in support of the business
• Develop the implementation and application of relevant operating processes and procedures, and ensures all activities adhere to the relevant standards.
• Liaise with various teams and senior stakeholders across BP to advise on information security and risk and manages third party service providers that are helping to deliver related projects as required.
• Seeks opportunities for continuous improvement and automation within the specialism in response to internal and external developments.
• Develop and undertake threat hunting opportunities within in the SOC in addition to liaising with the cyber intelligence team to identify proactive risk mitigation measures.
• Complies with BPs Code of Conduct and models BPs Values & Behaviors.

Essential Education & Experience:

• Bachelors degree (e.g., Information Security, Network Security, Information Assurance, Information Technology, Computer Science) or equivalent experience and/or qualifications.
• L1 SOC experience
• Knowledge of SIEM and Cyber toolsets
• EDR experience
• Threat Hunting methods
• Strong problem-solving skills as applied to technical solutions
• Relevant experience of information security and risk
• Sound technical knowledge of security as applied to IT Networks, systems, and applications
• Strong stakeholder management skills
• Act as an escalation point for tier 1 analysts
• Experience of coaching and developing junior team members

Technical capability

• Good understanding of security fundamentals including network and host forensics, log analysis and basic malware analysis
• Strong technical analysis ability
• Understand the basics of email routing
• Understanding of core enterprise technologies such as Active directory, Windows OS, MAC OS, Linux etc.
• Understanding of adversarial attack patterns, vulnerabilities and TTPs
• Strong written and verbal communication skills

Leadership & EQ

• You embrace a culture of change and agility, evolving continuously, adapting to our changing world.
• You are an effective team player, looking beyond your own area/organizational boundaries to consider the bigger picture and/or perspective of others, while understanding cultural differences
• You continually enhance your self-awareness and seek input from others on your impact and effectiveness
• Well organized, you balance proactive and reactive approaches and multiple priorities to complete tasks on time
• You apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise

Desirable Criteria:

• COMPTIA Security+ / CYSA+ CASP+
• SANS Certification GSOC; GCIH
• CISSP Certification and accreditation
• Certified Ethical Hacker - CEH
• Cisco Certifications (CCNA or similar)
• Similar/ higher certifications

Travel Requirement No travel is expected with this role Relocation Assistance: This role is not eligible for relocation Remote Type: This position is not available for remote working Skills: Automation system digital security, Conformance review, Consulting, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis,Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management,Technical specialism Legal Disclaimer:We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitivefunctioning, veteran status or disability status.Individuals with disabilities may request a reasonable accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screeningsor interviews, etc.). If you would like to request an accommodation related to the recruitment process, pleasecontact usto request accommodations.If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.