Job Description:

Who you will work with

This team is responsible for response and management of cyber incidents, utilizing an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, they establish engineering principles and enhance the technology stack to continuously bolster bp's cybersecurity posture.

Let me tell you about the role

We are looking for Information Security Engineering Lead who will be responsible for leading and developing a team dedicated to supporting a large team of security experts and software engineers, to write, deploy, integrate, and maintain security standards and develop secure applications and automations.

You will advocate for and ensure that cloud, infrastructure and data teams adhere to secure policies, uncover vulnerabilities and provide remediation insights, and drive adoption of secure practices.

You will provide leading insight of industry and technology trends and best practices to shape bp's security agenda and create a culture of excellence.

What you will deliver

• Support development of and implement platform security standards, co-design schemas, ensure quality at the source of infrastructure build and configuration, and find opportunities to automate manual secure processes wherever possible.
• Work with business partners to implement security strategies and to coordinate remediation activities to ensure products safely meet business requirements.
• Serve as a subject matter expert in at least one domain (cloud, infrastructure, or data).
• Provide hands-on support to teams on secure configuration, and remediation strategies.
• Align strategy, processes, and decision-making across teams.
• Actively participate in a positive engagement and governance framework and drive an inclusive work environment with teams and collaborators including engineers, developers, product owners, product managers and portfolio managers.
• Evolve the security roadmap to meet anticipated future requirements and needs.
• Provide support to the squads and teams providing technical guidance, managing dependencies and risks.
• Create and articulate materials on how to embed and measure security on our cloud, infrastructure or data environments.
• Actively mentor emerging talent and promote a culture of continuous development.

What you will need to be successful

• 6+ years of experience in leading a security engineering team
• A minimum of 3 years of Cyber Security experience on one of the following areas: Cloud (AWS and Azure), Infrastructure (IAM, Network, endpoint, etc.), or Data (DLP, data lifecycle management, etc.).
• Deep and hands-on experience designing security architectures and solutions for reliable and scalable data infrastructure, cloud and data products in complex environments.
• Development experience in one or more object-oriented programming languages (e.g., Python, Scala, Java, C#) and/or development experience in one or more cloud environments (including AWS, Azure, Alibaba, etc.)
• Exposure/experience with full stack development.
• Experience with automation and scription for security tasks (e.g., IaC, CI/CD integration) and security tooling (e.g., vulnerability scanners, CNAPP, Endpoint and/or DLP)
• Deep knowledge and hands-on experience in technologies across all data lifecycle stages.
• Foundational knowledge of security standards, industry laws, and regulations such as Payment Card Industry Data Security Standards (PCI-DSS), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and Sarbanes-Oxley (SOX)
• Strong collaborator management and ability to lead teams through managerial and technical influence.
• Continuous learning and improvement approach.

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people's lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

Travel Requirement
Negligible travel should be expected with this role

Relocation Assistance:
This role is not eligible for relocation

Remote Type:
This position is a hybrid of office/remote working

Skills:

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp's recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.