Cybersecurity Analyst II

At H&P, our people are our strength.

Since 1920, Helmerich and Payne has been the industry’s most trusted partner in drilling productivity and reliability. As the world changes, so does our approach. We are changing the landscape of drilling by using cutting-edge rig technologies and drilling solutions to build upon a century of success, all while continuing to deliver better outcomes for our customers. 

At H&P, our people are our strength. We strive to continually lead with our Core Values that enable employees to develop on their H&P Journey. We believe that doing the right thing means creating a more diverse, equitable, and inclusive workplace that empowers our people to bring their authentic selves to work every day. 

Some companies offer career paths. We offer a Journey of a Lifetime. Let's go far, together.

Hear directly from our employees, and leaders about their unique journeys at Helmerich and Payne. 

Location: Tulsa, OK

Work Type: Onsite

#LI-Onsite

(This role includes a rotating on-call night schedule, that occurs for one week every five weeks.)

At a Glance:

The Cybersecurity Analyst is primarily responsible for 24x7 monitoring and auditing the company’s cybersecurity environment and securing it from information theft, corruption, or unauthorized access.

What you will do:

• Monitor systems for alarms, notifications of possible malicious email, or other activity.
• Analyze available data along with known Indicators of Compromise, Threat Intelligence Feeds, and other sources of information for possible malicious activity.
• Participate as a member of H&P’s Cybersecurity Incident Response Team.
• Ensure appropriate response actions are taken to resolve the incident.
• Ensure all actions taken are properly documented in accordance with standards.
• Participate in the Root Cause Analysis effort after the incident is resolved.
• Participate in After-Action Reporting and Remediation Efforts.
• Create and maintain written documentation for processes and procedures within the Cybersecurity team

What you need:

• Proven success in an operational security capacity, to include but not limited to: Incident Response, Network Security Monitoring, Troubleshooting, Forensics, Systems Risk Analysis, Penetration Testing, and related areas.
• Experience with one or more of the following systems/technologies: SIEM, Intrusion Detection/Protection Systems, Next Generation Firewall, Endpoint Protection and Remediation, Vulnerability Management, Application Whitelisting, Network Packet Inspection, Email Security Systems, or related.
• Working knowledge of networking concepts, analysis of network packet captures, boundary protection, and related security issues.
• Working knowledge of operating systems (Windows and Linux), applications, logging, virtualization technologies; and related server and workstation systems, protocols, and security issues.
• Knowledge of various attack vectors used in association for network intrusion, data exfiltration, etc.
• Familiarity with cybersecurity policies, processes, standards, industry best practices, and frameworks (NIST, ISO, CIS, etc.).
• Highly motivated, self-starting individual, and able to multi-task and manage to timelines with very little supervision in a fast pace environment.
• Proven strong oral and written communication/presentation skills to a broad range of employees.  Able to clearly communicate technical details to IT and Engineering personnel, but also simplify explanations for non-technical individuals. 
• Strong interpersonal skills that establish and sustain close working relationships with functional teams and subject matter experts both internal and external to IT.

Not a must, but a plus

• Bachelor's degree in Computer Science, Management Information Systems, Information Assurance or a related STEM field or equivalent experience1-3 years of cybersecurity and cyber incident response related experience
• Oil and Gas or other Critical Infrastructure (e.g. Electric Power, Manufacturing), and / or