Information Security Engineering Specialist

BP; India; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

BP is seeking an Information Security Engineer to drive security and risk activities across our IT environments. You will lead changes to security processes, review architectures, and manage security solutions from identification to implementation.

In this role you will apply AWS Well-Architected practices, build automation with AWS pipelines, Terraform, and CloudFormation, and mentor collaborators on cyber risk and secure engineering standards.

Qualifications

• 4+ years of experience in AWS security and information security solutions.
• Experience deploying security controls using IaC (Terraform, CloudFormation) and AWS services.
• Ability to mentor teams on security risks and best practices.

Responsibilities

• Provide day-to-day InfoSec risk activities and security operations.
• Design and develop security solutions across BP IT environments.
• Lead security architecture reviews and risk assessments.
• Mentor teams on AWS security services and secure coding practices.

Skills

Cloud security

AWS security

AWS CLI scripting

Infrastructure as code

IAM / RAM

Incident management

Tools

AWS CodePipeline

Terraform

CloudFormation

Git

ADO pipelines

Job description

Entity: Technology

Job Family Group: IT&S Group

Job Description:

BP has embarked on an ambitious plan and transform using digital technologies to drive efficiency, effectiveness, and new business models. The Information Security Engineer is responsible for delivering information security and risk activities.

Using technical capabilities, you will lead changes to security processes and procedures, fix sophisticated security issues, review security architectures and manage security solutions from identification to implementation.

You will see that we follow policies, standards and standard practices and provide technical expertise to collaborators. It's a chance to operate in a sophisticated and delivery-focused environment, with the resources of one of the world's most forward-thinking IT departments and leading IT vendors at your fingertips.

Security Engineering Specialist builds, develops with active hands-on engagement in the continuous improvement of security engineering practises and the quality of Cyber advice, mentorship and standards used across bp.

An SME in the AWS Security Engineering space for architecting and maintaining multiple AWS Products and their automation deployments.

You are required to conduct security related architecture reviews based on standard methodology frameworks such as AWS Well Architected framework, conduct risk reviews

In-depth knowledge of CICD process / Secure coding standard methodologies / experience of automation and development tooling such as ADO, GIT, AWS Code Pipeline and most significantly has the ability to learn other tools

The successful candidate should be prepared to work in a sophisticated work environment with changing priorities and related work engagements

You will work within an agile delivery squad directly contacting our customers, development teams, business product owners and 3rd party vendors

Key Accountabilities

Team

You will provide decent support in day to day InfoSec risk activities specific to your specialism. This could involve designing and developing security solutions to work across BP IT environments that are consistent with current policy; running investigations and incident response processes and providing a consistent response to cyber-based malicious activity; and acting as a work with various teams with information security in their segment/functions etc. You will drive the implementation and application of relevant operating processes and procedures, and ensure all activities follow relevant standards. You will also manage outreach for the wider Security Engineering Function to support them in Technology adoption.

Relationships

You will develop and manage relationships with collaborators, delivering decent technical knowledge to support project delivery, identify key challenges and ensure that security solutions protect BP against cyber risks. You will mentoring/training to members of within the team as well as consumers of AWS security services. You will also work across Security Engineering & Enterprise AliCloud Squads and other teams to align and optimize activities and provide backup as vital for incidents and projects.

Technology

You will build awareness of internal and external technology developments, handling the delivery of process and system improvements, identifying, and implementing continuous improvement plans for the specialisation and ensuring standard methodology is shared across the team.

Safety and Compliance

The safety of our people and customers is our highest priority. We provide a culture of operational safety and ensure our architectures, designs and processes enhance and improve our digital security.

Required Skills

• Deep hands-on knowledge of Cloud Security Center, cloud firewall, WAF and other Security products in AWS. (AWS certification preferable)
• AWS CLI scripting. (Scripting: Python, Bash, PowerShell, Ruby, Lambda (NodeJS / Python)
• Detailed knowledge of Infrastructure as code: - ADO pipelines, Terraform, cloud automation and resource orchestration.
• Good understanding and hands-on implementation of Resource Access Management (RAM) and integration with industry identity providers.
• Demonstrate knowledge of Incident Management, Problem Management and Relationship Management

Required Criteria / Experience

Demonstrated ability with 4 years of experience in technical solutions within AWS platform to improve the overall security posture.

Develop and deploy security solutions using CloudFormation, terraform and other languages to automate the security capability within the platform using automation.

Mentor and advice to the overall platform and customers regarding security risks by performing regular risk assessments, threat modelling and security testing.

Develop Security knowledge base by publishing AWS security standards, architectural patterns to assist customers in developing secure solutions in the platform.

Lead and support the security operations role to ensure operational resp