Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

You will work with

You will work as a member of a high-energy, top-performing team of engineers, working alongside technology leaders to shape the vision and drive the execution of ground-breaking compute and data platforms that make a real impact.

Let me tell you about the role

As an Information Security Engineering Specialist, you are responsible for implementing and maintaining security solutions that protect our technology platforms, APIs, and applications. You work closely with engineering and security teams to embed security into platform architecture, automate risk mitigation, and ensure compliance across cloud and on-prem environments. You focus on identifying vulnerabilities, scaling secure practices, and enabling teams to build securely by default.

What you will deliver

• Support development of and implement platform security standards, co-design schemas, ensure quality at the source of infrastructure build and configuration, and find opportunities to automate manual secure processes wherever possible.

• Work with business partners to implement security strategies and to coordinate remediation activities to ensure products safely meet business requirements.

• Contribute as a subject matter expert in at least one domain (cloud, infrastructure, or data).

• Provide hands-on support to teams on secure configuration and remediation strategies.

• Align strategy, processes, and decision-making across teams.

• Actively participate in a positive engagement and governance framework and contribute to an inclusive work environment with teams and collaborators including engineers, developers, product owners, product managers and portfolio managers.

• Evolve the security roadmap to meet anticipated future requirements and needs.

• Provide support to the squads and teams through technical guidance and by managing dependencies and risks.

• Create and articulate materials on how to embed and measure security on our cloud, infrastructure or data environments.

• Contribute to mentoring and promote a culture of continuous development.

What you will need to be successful (experience and qualifications)

• 7+ years of experience in security engineering or technical infrastructure roles.

• A minimum of 5 years of Cyber Security experience on one of the following areas: Cloud (AWS and Azure), Infrastructure (IAM, Network, endpoint, etc.), or Data (DLP, data lifecycle management, etc.).

• Deep and hands-on experience designing security architectures and solutions for reliable and scalable data infrastructure, cloud and data products in complex environments.

• Development experience in one or more object-oriented programming languages (e.g., Python, Scala, Java, C#) and/or development experience in one or more cloud environments (including AWS, Azure, Alibaba, etc.).

• Exposure/experience with full stack development.

• Experience with automation and scripting for security tasks (e.g., IaC, CI/CD integration) and security tooling (e.g., vulnerability scanners, CNAPP, Endpoint and/or DLP).

• Deep knowledge and hands-on experience in technologies across all data lifecycle stages.

• Foundational knowledge of security standards, industry laws, and regulations such as Payment Card Industry Data Security Standards (PCI-DSS), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and Sarbanes-Oxley (SOX).

• Strong collaborator management and ability to influence teams through technical guidance.

• Continuous learning and improvement approach.

About bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.