OT Security Analyst

Full job description
Whitecap Resources Inc. ("Whitecap") is a Canadian oil & liquids weighted growth company that pays a monthly cash dividend to its shareholders. Our business focuses on profitable production growth and sustainable dividends to shareholders. Our objective is to fully fund our capital expenditures and dividend payments within funds flow.
Â
Since September 200+, Whitecap has experienced remarkable growth, increasing production from 850 boe/d to over 175,000 boe/d. We have unconventional and conventional assets exclusively focused in Western Canada and the asset base includes the Weyburn EOR Project. As a majority owner and operator of the Weyburn EOR Project, annually we safely sequester approximately 2.0 million tonnes of CO 2 making it a unique project within our portfolio.
We currently employ 570 people and including our valued contract staff, we are accountable for approximately +00 personnel.
Â
At Whitecap, our corporate culture is entrepreneurial. We strive to create a culture of purpose and integrity where initiative and innovation are encouraged and valued. Our corporate philosophy allows us to develop skills, collaborate alongside our teammates, and ultimately have a fulfilling career.
Purpose:

The OT Security Analyst will work closely with the OT Security team, provide day-to-day operational support for OT environments, act as an internal SOC team member, and complete Security-related projects as directed. 3-5 years of security experience and or a combination of OT experience is an asset.

Main Responsibilities & Activities:

Provide tier 1 & 2 day-to-day security operations support.

Participate in reviewing and analyzing security-related events, assessing criticality and priority.

Create new processes and workbooks to automate and streamline investigative processes.

Work with SIEM technologies to ingest new data sources, run advanced correlation. processes, create new content, and use visualization and automation techniques.

Manage logging from various sources with the goal of gaining better visibility and insights.

Maintain compliance with industry standards and government regulations, ensuring security and reliability in automation systems.

Assist in the development of tools to monitor network security protocols and overall performance.

Familiarity with OT specific protocols such as Modbus and CIP.

Manage the ongoing enforcement of security policies, standards, and procedures.

Able to identify vulnerabilities and recommend mitigations.

Update hardware and software asset inventories.

Ensure proper IT-OT network segmentation to prevent lateral threat movement.

Deploy and integrate Endpoint Detection and Response solutions across OT environments.

Deploy, configure, and manage secure network segmentation initiatives.

Understanding the distinct differences between IT and OT.

Familiarity with firewalls and network segmentation.

Knowledge, Skills & Abilities:

Ability to analyze, collaborate, and communicate within cross-functional team.

Associate Diploma or Bachelors of Science degree in Computer Science or Information Technology related program.

Basic understanding of computer hardware, software and network concepts.

Experience with scripting language such as Python or PowerShell.

3-5 years of experience as a security analyst, or similar.

SSCP or CCSP level knowledge/experience (certification preferred).

Independently motivated individual with analytical and problem-solving abilities.

Self-starter capable of working independently with minimal supervision.

Exceptional abilities to troubleshoot and collaborate to resolve incidents.

Strong documentation and communication skills is required.

Team player capable of learning and contributing to shared projects and goals.

A trustworthy individual, capable of safeguarding confidential information.

Oil and Gas & Operational Technology (OT), ICS and SCADA experience a benefit.

We thank you for your interest; however, we will contact only those applicants selected for an interview.
We will manage all applications with discretion and confidentiality.