Information Security Engineering Specialist

You will work with

This team is responsible for response and management of cyber incidents, applying an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, they establish engineering principles and enhance the technology stack to continuously bolster bps cybersecurity posture.

Let me tell you about the role

Security Engineering Specialist

You will advocate for and help ensure that cloud, infrastructure, and data teams adhere to secure policies, uncover vulnerabilities and provide remediation insights, and contribute to the adoption of secure practices.

You will stay informed on industry and technology trends to strengthen bps security posture and contribute to a culture of excellence.

What you will deliver

• Support development of and implement platform security standards, co-design schemas, ensure quality at the source of infrastructure build and configuration, and find opportunities to automate manual secure processes wherever possible.
• Work with business partners to implement security strategies and to coordinate remediation activities to ensure products safely meet business requirements.
• Contribute as a subject matter expert in at least one domain (cloud, infrastructure, or data).
• Provide hands-on support to teams on secure configuration and remediation strategies.
• Align strategy, processes, and decision-making across teams.
• Actively participate in a positive engagement and governance framework and contribute to an inclusive work environment with teams and collaborators including engineers, developers, product owners, product managers and portfolio managers.
• Evolve the security roadmap to meet anticipated future requirements and needs.
• Provide support to the squads and teams through technical guidance and by managing dependencies and risks.
• Create and articulate materials on how to embed and measure security on our cloud, infrastructure, or data environments.
• Contribute to mentoring and promote a culture of continuous development!

What you will need to be successful (experience and qualifications)

• 3+ years of experience in security engineering or technical infrastructure roles.
• A minimum of 3 years of Cyber Security experience on one of the following areas: Cloud (AWS and Azure), Infrastructure (IAM, Network, endpoint, etc.), or Data (DLP, data lifecycle management, etc.).
• Deep and hands-on experience designing security architectures and solutions for reliable and scalable data infrastructure, cloud and data products in complex environments.
• Development experience in one or more object-oriented programming languages (e.g., Python, Scala, Java, C#) and/or development experience in one or more cloud environments (including AWS, Azure, Alibaba, etc.).
• Exposure/experience with full stack development.
• Experience with automation and scripting for security tasks (e.g., IaC, CI/CD integration) and security tooling (e.g., vulnerability scanners, CNAPP, Endpoint and/or DLP).
• Deep knowledge and hands-on experience in technologies across all data lifecycle stages.
• Foundational knowledge of security standards, industry laws, and regulations such as Payment Card Industry Data Security Standards (PCI-DSS), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and Sarbanes-Oxley (SOX).
• Strong collaborator management and ability to influence teams through technical guidance.
• Continuous learning and improvement approach.

About bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered.