Eagle Ford Jobs

Job Information

BP Americas, Inc. Security Engineer in Denver, Colorado


Job title:

Security Engineer



Req ID:


Relocation available:

Yes - Domestic (In country) only

Travel required:

Yes - up to 10%

About BP:

BP's BPX Energy business (formerly known as the Lower 48) operates across a vast US geography, from Texas north through the Rocky Mountains. The business manages a diverse portfolio which includes an extensive unconventional resource base of about 7.5 billion barrels of oil equivalent across 5.5 million gross acres in some of the largest and most well-known basins in the US. Headquartered in Denver (Colorado), BPX Energy employs about 1,700 people across six states, operates more than 9,600 producing wells and has 70,000 royalty owners. Our vision is to be the premier, high return, onshore exploration and production company that consistently increases asset value. Our Wyoming operations are anchored on the giant Wamsutter tight gas field in the south central part of the state. In the San Juan area of Colorado and New Mexico we produce from tight gas sands and operate the largest coal-bed methane field in the US. Our Mid-Continent operations cover the prolific Anadarko, and is home to the famed East Texas basin, along with the Woodford shale gas play and Arkoma basin. We also have non-operating interests in over 10,000 wells across the US with substantial positions in both the Eagle Ford and Fayetteville shale basins. In 2018, BP completed a $10.5 billion acquisition of BHP's world-class unconventional oil and gas assets in the Permian-Delaware basin in Texas, along with two premium positions in the Eagle Ford and Haynesville basins in Texas and Louisiana. These assets currently produce 190,000 barrels of oil equivalent per day, of which about 45 percent are liquid hydrocarbons. The deal represents BP’s largest purchase since buying ARCO in 1999. It is a transformational acquisition for our BPX Energy business which gives the BPX Energy team access to some of the best acreage in some of the best basins in the onshore U.S.

Job Family Group:

Research & Technology Group

Job Profile Summary:

The role of the Information Security Engineer is to design, document, and implement security policies and solutions across BPX Energy’s information technology environment. They will also support efforts to monitor and manage risks, vulnerabilities, and compliance, while promoting cyber security awareness across the organization. The Information Security Engineer is a critical member of BPX Energy’s Architecture and Engineering team to ensure the security and safety of network, systems, and applications in data centers, multiple clouds, office locations, and the field. This role requires a highly-motivated self-starter, who can both take the initiative and follow directions, and who has the ability to handle multiple concurrent tasks and shifting priorities This person must be comfortable operating as an individual contributor and using influence and expertise to aid the transformation of an organization and enable a cutting edge “work on demand” environment.BPX Energy’s security standards are established by BP Group, and our security posture is monitored by BP Security Operations Center, requiring the Information Security Engineer to support coordination with BP staff globally. BPX Energy’s infrastructure and systems operations are outsourced to a managed service partner and this role will require the ability to coordinate/lead in this type of environment.

Time Type:

Full time

Posting Country:

United States of America

Posting Location:

United States - Colorado - Denver

Job advert:

  • Support development and lead implementation of comprehensive security policy, standards, guidelines and procedures to ensure ongoing maintenance of security within the legal frameworks required by BPX Energy.

  • Develop and implement strategies to respond to and recover from a security breach. Lead incident response activities to minimize the impact. Afterwards, lead a technical and forensic investigation into how the breach happened and the extent of the damage. They prepare reports of their findings to be reported to management.

  • Proactively educate the workforce on information security through training and building awareness.

  • Design and implement activities to regularly and periodically test networks, systems, and applications for vulnerabilities, as well as on demand. Coordinate and conduct penetration testing to simulate attacks on critical applications and infrastructure.

  • Provide security design and advice in support of solution development, infrastructure, and enterprise technology projects to ensure the integrity of BPX Energy’s systems and data. Review designs to ensure security controls are implemented.

  • Design, document, and implement security solutions including but not limited to the following:

  • Authentication, authorization, and auditing, and account administration controls

  • Confidentiality, Integrity, and Availability of the system and data, including IRM/DRM, encryption, and PKI

  • Network security in-depth, including firewalls, intrusion detection, and content filtering

  • Server/system hardening and protection

  • Endpoint protection, including anti-virus, anti-malware, and behavioral detection

  • Native public cloud security in Microsoft Azure and/or AWS

  • Verifies security systems by developing and implementing test scripts.

  • Coordinates upgrades to systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.

  • Prepares system security reports by collecting, analyzing, and summarizing data and trends.