Trabajos incident response en SurbitonCrear alertas

Entity: Technology Job Family Group: IT&S Group Job Description: Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner! The Cyber Security Incident Response Specialist would be member of CSIRT, part of Counter Threat & Engineering (CT&E) function, responding to cyber threats and security incidents globally. The team operates out of bp hubs in Houston (U.S), Sunbury (U.K), Kuala Lumpur (Malaysia), Pune (India), and Singapore. The Security Operations Center (SOC) raises incidents to CSIRT, which responds to the incidents by conducting investigations using digital forensics, advanced techniques, and collaborating across bp. Team members must understand bp’s business segments and address a broad range of security-related questions. You will help ensure enterprise security, enabling safe and secure business operations as part of this global team. The CSIRT is part of our wider CT&E team that is responsible for protecting bp against cyber threats. This role also requires you to be on an on-call Rota few times throughout the year. * Support the bp SOC as an escalation point for security events and incidents. * Conduct digital forensic investigations on high-priority incidents to include functions such as host (disk and memory) forensics, network forensics and log analysis. * Work across Digital Security and the bp business functions to partner on incidents and to ensure all appropriate actions are being taken and communicated. * Conduct advanced threat hunting by using threat intelligence and the MITRE ATT&CK framework to proactively identify suspicious activity in the environment. * Ensure data accuracy within the case management system and others. * When not actively responding to incidents, other key responsibilities within the role include development of documentation and processes such as playbooks, refining your skills through training opportunities and identifying and enhancing the capabilities of the team by developing opportunities for automation (i.e., custom scripts and tool integration). * Bachelor's or Master’s degree (e.g., Information Security, Cyber Security, Network Security, Information Assurance, Information Technology, Computer Science) or equivalent experience and/or qualifications. * Experience with attacker tactics, techniques and procedures (TTP’s). * Knowledge of both Windows and Linux operating systems to conduct host-based forensics and analysis. * Knowledge of cloud platforms such as AWS and Azure. * Experience with many different types of log sources such as firewall, web and database to identify anomalous activity. * Understand network communications and protocols. * Experience and deep knowledge of SIEM, EDR and other core cyber toolsets. * Strong problem-solving skills as applied to technical solutions. * Sound technical knowledge of security as applied to IT/OT networks, systems, and applications. * Ability to communicate effectively and document investigative findings in a clear and concise manner. * * You are an effective teammate, looking beyond your own area/organizational boundaries to consider the bigger picture and/or perspective of others, while understanding cultural differences. * You continually enhance your self-awareness and seek input from others on your impact and effectiveness. * Well organized, you balance proactive and reactive approaches and multiple priorities to complete tasks on time. * You apply judgment and common sense – you use insight and good judgment to inform actions and respond to situations as they arise. * You align with BP's Code of Conduct and demonstrate strong leadership through BP's Leadership Expectations and Values & Behaviours. * COMPTIA Security+ / CYSA+ CASP+ * SANS Certification GSOC; GCIH; GCFA; GCFE; GCFR * CISSP Certification and accreditation * Certified Ethical Hacker – CEH * Cisco Certifications (CCNA or similar) Why join us? At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened by diversity. There are many aspects of our employees’ lives that are meaningful, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, a generous paid parental leave policy, excellent retirement benefits, among others! We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Reinvent your career as you help our business meet the challenges of the future. Apply now! Travel Requirement No travel is expected with this role Relocation Assistance: This role is not eligible for relocation Remote Type: This position is a hybrid of office/remote working Skills: Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism Legal Disclaimer: We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please ___. If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

Skills, Experience, Qualifications, If you have the right match for this opportunity, then make sure to apply today.Our purpose is to deliver energy to the world, today and tomorrow.For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we opera

A global energy company located in Sunbury-on-Thames is seeking a Cyber Security Incident Response Specialist to join their CSIRT team. In this role, you will respond to cyber threats and manage security incidents globally.

You will coordinate cross-functional technical teams during major incidents, drive containment and recovery, and own post-incident reviews and playbooks. Owning cyber incident response. SOC, Incident Response, or Threat Hunting.

Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness. Lead and deliver technical incident response

Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering both emergency response services and proactive incident readiness engagements. This includes reviewing and

Developing and enhancing incident management and response frameworks. Those with a background in reactive Incident Response (either in-house or from Consulting already), who are wanting to move into an advisory IR role would be an excellent fit for this position. Leading Consultancy firm is seeking

A global financial services company is seeking a Major Incident Manager to lead the management of critical incidents and ensure the stability of their technology systems. This role requires strong leadership, analytical skills, and over 4 years of major incident management experience in an enterpris

A leading cybersecurity firm in the UK is seeking Cyber Incident Response Consultants/Managers to investigate advanced threats and deliver containment. Candidates should have proven experience in incident response and digital forensics, with strong knowledge of modern attack techniques.

A cybersecurity solutions provider is seeking an Incident Response Consultant in the Midlands. The role involves leading the response to security incidents, analyzing logs, and developing strategies to improve resilience against cyber threats.

This full-time position requires experience with Azure Sentinel and Defender for Cloud, and the ability to lead incident response efforts.

A digital forensics company is seeking a Forensic Computer Specialist responsible for analyzing and presenting digital evidence in criminal investigations.The role requires strong technical expertise, attention to detail, and analytical skills.Daily tasks include forensic acquisition of devices, pre

A global technology firm in the United Kingdom is seeking a skilled Global Security Incident Response Engineer. Ideal candidates possess a Bachelor's degree in Computer Science, relevant certifications, and significant experience in incident response. The role involves managing live incidents, condu

A cybersecurity firm is seeking a Senior DFIR Consultant to provide expert incident response services, perform advanced forensic analysis, and support investigations. The ideal candidate will have 2-4 years of experience in incident response, proficiency in scripting and various forensic tools, and

A cyber security firm is looking for a seasoned Cyber Security Analyst specializing in Managed Detection and Response (MDR). You will be responsible for responding to cyber security incidents, developing playbooks, and monitoring security logs.

The role involves incident management, collaboration across security functions, and applying threat modeling.

The role involves providing high-level incident response, managing security tools, and enhancing the firm's security posture.

A leading online fashion retailer is seeking a Security Operations and Incident Response Specialist to protect the organization from threats. The successful candidate will have extensive experience in Incident Response and mentoring team members, with a strong knowledge of Microsoft's security techn

Security Operations Center (SOC), you will fit into a global team that provides 24x7 monitoring and incident response, acting as the frontline for attacks against the firms' infrastructure. Minimum of 3 years of experience working in information security, with a focus on security operations center (

Cyber Incident Response Team (CIRT) Manager. Defining the tooling roadmap for incident response and forensic capabilities. Strong leadership capability or experience managing incident response teams.

A leading tech firm in the United Kingdom is seeking a SOC Shift Lead.This role involves monitoring and triaging security alerts for critical infrastructure.You will manage a team while analyzing network traffic and logs to identify threats.The position is based in Hemel Hempstead with a shift patte

A leading financial institution in Greater London seeks an experienced professional for incident response management in its cybersecurity team. The ideal candidate will have robust experience in threat analytics and incident adjudication, working in a collaborative security operations center environ

A leading UK cyber security firm is seeking a Security Analyst to manage incident triage and improve client security operations.

A leading digital experience platform seeks a Senior Security Analyst to manage security incidents and enhance their security program.

Responsibilities include managing cybersecurity incidents, conducting threat hunting, and developing incident response strategies. A leading technology firm in Greater London is looking for a Security Consultant to lead incident response efforts, analyze and implement security solutions, and collabo

Bachelor’s degree in Computer Science, Information Security, or a related field* 5+ years of experience in Cyber Security Operations type role* 3+ years of experience specifically in Incident Response type roles that performed event investigations* Excellent communication skills, with experience d

Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environme

A leading cybersecurity firm is seeking a Senior Consultant to collaborate across teams for incident response. Ideal candidates should have 4-6 years of experience in incident response and strong analytical skills. In this position, you will handle emergency incidents and provide technical investiga

A leading housing association in London is seeking an experienced Communications Manager (Incident Response) for a 6-month contract. This role is essential for delivering clear and empathetic communications to residents affected by a significant incident.

We are now seeking an Associate Consultant or Consultant to join our Digital Forensics and Incident Response team in London. In this role you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our client

The role involves troubleshooting, incident response, and contributing to internal policies while ensuring data protection.

Incident Response Analyst – London (Hybrid) – Paying up to £75,000 – Financial Services. Lead incident response efforts and conduct digital forensics. Maintain detailed incident records and conduct post-incident reviews.

The role involves overseeing SOC operations, enhancing threat detection, and incident response while driving improvements in security monitoring and automation. The ideal candidate should have a strong background in cyber security operations, experience in leading SOC teams, and knowledge of inciden

A global financial technology firm is seeking a Security Engineer to bolster their security team.The role focuses on AWS security, including designing and maintaining security controls, optimizing AWS GuardDuty, and leading cloud security monitoring efforts.Candidates should have a strong understand

A leading design platform is looking for a Senior Security Engineer - Incident Response to lead incident response coordination, monitor security threats, and develop automation workflows. The ideal candidate will have strong cloud security knowledge and experience in incident response.

A leading cybersecurity firm in the United Kingdom is seeking an experienced Level 3 SOC Analyst to spearhead advanced investigations and incident responses.

This role involves acting as the primary point of contact for customers, handling incidents through calls and emails, and ensuring compliance with SLAs.

In this role, you'll provide essential 24x7 monitoring and response to security incidents, conduct investigations, and engage in threat hunting.

Incident analysis, combining sound analytical skills with advanced knowledge of cybersecurity, digital forensics and incident response. Specialised experience in cyber incident response and cyber incident management. Experience conducting digital forensics or incident response or a similar role.

Incident Response type roles that performed event investigations. Solid understanding of cybersecurity principles, including incident response, policy governance, and compliance requirements. The Incident Response Lead is responsible for driving the containment and eradication of threats during cybe