Information Security Engineering Specialist

Overview

Information Security Engineering Specialist at BP, a hands-on AWS security engineering role that architects and maintains AWS products and their automation deployments within an agile delivery squad.

What you'll do

• Provide day-to-day support on InfoSec risk activities specific to your specialism.
• Design and develop security solutions across BP IT environments consistent with current policy.
• Run investigations and incident response processes and provide a consistent response to cyber-based malicious activity.
• Drive implementation and application of relevant operating processes and procedures, and ensure activities follow relevant standards.
• Manage outreach for the wider Security Engineering Function to support technology adoption.
• Develop and manage relationships with collaborators, deliver technical knowledge to support project delivery, and ensure security solutions protect BP against cyber risks.
• Mentor and train team members and consumers of AWS security services.
• Work across Security Engineering and Enterprise AliCloud Squads and other teams to align and optimize activities and provide backup for incidents and projects.
• Build awareness of internal and external technology developments and identify and implement continuous improvement plans for the specialisation.
• Conduct security-related architecture reviews based on standard frameworks such as the AWS Well Architected framework.
• Conduct risk reviews.
• Mentor and advise the overall platform and customers on security risks by performing regular risk assessments, threat modelling and security testing.
• Develop security solutions using CloudFormation, Terraform and other languages to automate security capability within the platform.
• Develop the security knowledge base by publishing AWS security standards and architectural patterns.
• Lead and support security operations to meet operational responsibilities and secure the platform, with formal reporting to the Security Principal.
• Liaise with Cloud Security Engineering, Security Architecture, Enterprise Architecture and Compute platform to ensure alignment to global standards.
• Support and respond to platform-based security incidents in a timely manner and support the CTI and SoC where needed.
• Develop the security roadmap for improving existing security capabilities and adding new ones to defend against new threats.

What you'll need

• Deep hands-on knowledge of Cloud Security Center, cloud firewall, WAF and other security products in AWS.
• AWS CLI scripting.
• Scripting in Python, Bash, PowerShell, Ruby, or Lambda (NodeJS / Python).
• Detailed knowledge of Infrastructure as Code: ADO pipelines, Terraform, cloud automation and resource orchestration.
• Good understanding and hands-on implementation of Resource Access Management (RAM) and integration with industry identity providers.
• Knowledge of Incident Management, Problem Management and Relationship Management.
• 4 years of experience in technical solutions within the AWS platform to improve overall security posture.
• In-depth knowledge of CI/CD processes, secure coding standard methodologies, and automation and development tooling such as ADO, Git and AWS CodePipeline.

Nice to have

• AWS certification.
• Ability to learn other tools.

Details

• Location: Pune, India.
• Remote type: hybrid of office and remote working.
• Negligible travel expected.
• Eligible for relocation within country.
• Works within an agile delivery squad, directly contacting customers, development teams, business product owners and third-party vendors.
• Works in a sophisticated environment with changing priorities and related work engagements.
• Advertised as full time; flexible working arrangements may be considered.