Cyber Security Analyst

Cyber Security Incident Response (CSIRT) Specialist Sunbury-on-Thames – Hybrid/RemoteBP is a global energy organisation delivering reliable energy today while transitioning towards a net zero future. The Cyber Security Incident Response Team (CSIRT), part of Counter Threat & Engineering (CT&E), is responsible for responding to global cyber threats and incidents across bp’s digital platforms.What you’ll doAct as an escalation point for security incidents from the global Security Operations Centre (SOC)Conduct digital forensic investigations, including host-based and network forensics and log analysisPerform advanced threat hunting using threat intelligence and the MITRE ATT&CK frameworkCollaborate across cybersecurity, business functions, and technical teams to ensure effective incident managementMaintain accurate documentation within case management systemsDevelop response playbooks, improve processes, and contribute to automation initiativesWhat you’ll needExperience in cyber incident response, digital forensics, or SOC/CSIRT environmentsKnowledge of attacker tactics, techniques and procedures (TTPs)Strong understanding of Windows and Linux operating systemsExperience working with SIEM, EDR and core security toolsFamiliarity with cloud environments such as AWS or AzureAbility to analyse logs from firewalls, network devices and applicationsStrong written and verbal communication skillsDesirable qualificationsCOMPTIA Security+, CySA+, or CASP+SANS certifications (GCIH, GCFA, GCFE, etc.)CISSP, CEH or similar certificationsExperience in MOD, defence, or highly regulated environmentsWhy join bp?Hybrid working model (60% office, 40% remote)Global cyber operations across multiple regionsOpportunities for professional training and certificationCompetitive benefits including pension, medical cover and career development supportApply now via Haystack.