Location
Malaysia - Kuala Lumpur
Travel required
Negligible travel should be expected with this role
Job category
Digital & technology
Relocation available
This role is not eligible for relocation
Job type
Professionals
Job code
RQ096034
Experience level
Intermediate
Job summary

JOB DESCRIPTION:

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!
Technology is making a difference in bp’s plans to invest in today’s energy system and help build tomorrow’s. As an expert community of science, safety and security, as well as digital specialists, our aim is to advance and protect bp. We use our expertise to help improve efficiency, increase effectiveness and harness the transformational potential of digital technologies to deliver value.
BP has embarked on an ambitious plan to modernize and transform as an integrated energy company, using digital technologies to drive efficiency, effectiveness, and new business models. As an Operational IS Specialist, you will be responsible for supporting information security and risk activities for Operational Security Management.
The Security Operations Center is responsible for monitoring and responding to incidents, performing initial triage and response, and calling out serious threats to members of the Cyber Security Incident Response Team (CSIRT) and the various business entities in BP. The SOC Analyst is the first point of contact many have with the Digital Security organization and therefore we also have an ambassadorial role in promoting Digital Security to the wider bp. As such, they must be knowledgeable about the various business segments and be able to answer, or direct to others, security-related questions covering a wide range of topics.
Collaborating with the SOC Lead in Malaysia, you will work as part of the distributed team globally to provide security across the enterprise that enables business activity and promotes safe and secure operations.

KEY ACCOUNTABILITIES

Undertake Incident monitoring, detection and response activities in the SOC
Analyze and investigate security alerts and incidents with appropriate critical issue in support of the business
Develop the implementation and application of relevant operating processes and procedures, and ensures all activities adhere to the relevant standards.
Ensure data accuracy within the SIEM, case management system and others.
Liaise with various teams and senior partners across BP to advise on information security and risk and manages third party service providers that are helping to deliver related projects as required.
Seeks opportunities for continuous improvement and automation within the specialism in response to internal and external developments.
Develop and undertake threat hunting opportunities within the Security Operations Centre in addition to collaborating closely with the cyber intelligence team to identify proactive risk mitigation measures.
Aligns with BP’s Code of Conduct and models BP’s Values & Behaviors.
Essential Education:
Bachelor’s degree (e.g., Information Security, Network Security, Information Assurance, Information Technology, Computer Science) or equivalent experience and/or qualifications.

ESSENTIAL EXPERIENCE AND JOB REQUIREMENTS:

L1 SOC experience
Knowledge of SIEM and Cyber toolsets
EDR experience
Knowledge of cloud platforms such as AWS and Azure
Threat Hunting methods
Strong problem-solving skills as applied to technical solutions
Meaningful experience of information security and risk
Sound technical knowledge of security as applied to IT Networks, systems, and applications
Strong partner leadership skills

SKILLS:

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism

Please refer the Job description for details