Information Security Engineering Specialist (Container Security)

You will work with the team that safeguards the company's digital assets and ensures robust cyber resilience covering various aspects of cybersecurity. Each team collaborates closely with other digital security teams and business units to ensure a cohesive approach to cybersecurity. We are looking for an innovative Information Security Engineering Specialist to focus on Container Security with a deep technical background in cloud-native ecosystems to govern and drive the protection of containerized environments across our multi-cloud platform supporting critical business operations. The ideal candidate will partner with platform engineering, Secure DevOps, Application Security, and SRE teams to design and implement secure and automated controls that continuously reduce risk without slowing down delivery. Your responsibilities will include ensuring compliance with industry regulations, safeguarding critical data, and enabling secure integration across diverse business environments. **Key Responsibilities:** - Container Security Advisory & Strategy: Act as the Container Security Specialist, supporting DevOps and platform teams on secure-by-design principles. Align container security strategy with global business goals and regulatory requirements. - Policy, Standards & Governance: Improve global container security standards, baseline, and Policy-as-code tailored for Oil & Gas, covering critical infrastructure protection aligned with NIST SP 800-190, and other security principles. Implement and improve governance for sophisticated containerized environments supporting global operations. Conduct detailed security assessments and reviews of critical containerized infrastructure. - Engineering & Architecture: Build and implement security policies for Kubernetes (K8s) clusters, including RBAC, Network Policies, and Pod Security Standards. Review CI/CD pipelines for vulnerabilities in container images and third-party libraries. Handle runtime container security tools to detect and intercept anomalous behavior. Implement and enforce compliance to ensure 'Secure by Build' environment. - Collaboration & Relationships: Build positive relationships across business units and technology ecosystems. - Safety & Compliance: Champion operational safety and digital security by ensuring container security policies reinforce compliance. **Qualification Required:** - 9+ years of cyber security experience, including 5+ years of experience in leading container security engineering. - Extensive experience in areas such as Container Security, image scanning, SBOM, dependency control, runtime security, eBPF tools, Cloud Security (AWS and Azure), etc. - Deep experience in crafting container security solutions for reliable and scalable infrastructure, cloud, and data products in sophisticated environments. - Experience with automation and scripting for security tasks and security tooling. - Foundational knowledge of security standards, industry laws, and regulations. - Strong collaborator with a continuous learning and improvement approach. **About bp:** bp is a global energy business committed to creating a diverse and inclusive environment where everyone can thrive. They aim to reimagine energy for people and the planet, helping the world reach net zero and improving people's lives. Join bp and become part of the team building our future! If you are selected for a position, your employment may be contingent upon adherence to local policy, including pre-placement drug screening, medical review of physical fitness for the role, and background checks. You will work with the team that safeguards the company's digital assets and ensures robust cyber resilience covering various aspects of cybersecurity. Each team collaborates closely with other digital security teams and business units to ensure a cohesive approach to cybersecurity. We are looking for an innovative Information Security Engineering Specialist to focus on Container Security with a deep technical background in cloud-native ecosystems to govern and drive the protection of containerized environments across our multi-cloud platform supporting critical business operations. The ideal candidate will partner with platform engineering, Secure DevOps, Application Security, and SRE teams to design and implement secure and automated controls that continuously reduce risk without slowing down delivery. Your responsibilities will include ensuring compliance with industry regulations, safeguarding critical data, and enabling secure integration across diverse business environments. **Key Responsibilities:** - Container Security Advisory & Strategy: Act as the Container Security Specialist, supporting DevOps and platform teams on secure-by-design principles. Align container security strategy with global business goals and regulatory requirements. - Policy, Standards & Governance: Improve global container security standards, baseline, and Policy-as-code tailored for Oil & Gas, covering c