Salary: £50,000 - 90,000 per year Requirements: Bachelors or Masters degree in Information Security, Cyber Security, Network Security, Information Assurance, Information Technology, or Computer Science, or equivalent experience Experience with attacker tactics, techniques, and procedures (TTPs) Knowledge of Windows and Linux operating systems for host-based forensics and analysis Familiarity with cloud platforms such as AWS and Azure Experience with various log sources (firewall, web, database) to identify anomalous activity Understanding of network communications and protocols Deep knowledge of SIEM, EDR, and other core cyber toolsets Strong problem-solving skills related to technical solutions Sound technical knowledge of security applied to IT/OT networks, systems, and applications Ability to communicate effectively and document investigative findings clearly Leadership qualities and high emotional intelligence Effective time management skills and the ability to prioritize multiple tasks Desirable: COMPTIA Security / CYSA, CASP, SANS Certification GSOC; GCIH; GCFA; GCFE; GCFR CISSP Certification and accreditation Certified Ethical Hacker (CEH) Cisco Certifications (CCNA or similar) Responsibilities: Support the bp Security Operations Center (SOC) as an escalation point for security events and incidents Conduct digital forensic investigations on high-priority incidents, including host, network forensics, and log analysis Collaborate across Digital Security and bp business functions during incident response Conduct advanced threat hunting using threat intelligence and the MITRE ATT&CK framework Ensure data accuracy within the case management system and other systems Develop documentation and processes, such as playbooks Engage in skills refinement through training opportunities Identify and enhance team capabilities through automation opportunities Participate in an on-call Rota few times throughout the year Technologies: AWS Azure Cloud Cisco Firewall Support Linux Network Security Web Windows More: At bp, our purpose is to deliver energy to the world today and tomorrow. With over 100 years in the industry, we focus on discovering, developing, and producing oil and gas globally. Our Cyber Security Incident Response Specialist will be part of the Cyber Security Incident Response Team (CSIRT), helping protect against cyber threats and ensuring secure operations. We support a diverse and inclusive work environment and offer benefits like flexible working options and a generous parental leave policy. This position is hybrid between office and remote working, with no travel expected. Join us as we meet future challenges together! last updated 10 week of 2026