Cybersecurity Analyst I

Helmerich & Payne•Tulsa, OK

2d•Onsite

About The Position

The Cybersecurity Analyst I monitors H&P’s IT and OT environments—including corporate systems, rig control systems, and remote-site connectivity—for security alerts, suspicious email, anomalous activity, and other signs of malicious activity. The analyst performs initial alert triage, analyzes available data alongside Indicators of Compromise and threat intelligence, and escalates issues to senior analysts and engineers as needed. As a member of H&P’s Cybersecurity Incident Response Team, the analyst supports senior team members during investigations and response activities. The role works with Rig Operations, Controls Engineering, and field personnel to help ensure that security response actions in OT environments protect safety, uptime, and process integrity. Responsibilities also include documenting actions, supporting root cause analysis, after-action reporting, and remediation, and assisting with asset inventory, vulnerability tracking, risk assessments, and security documentation. The position offers on-the-job training, mentorship, and professional development in OT/ICS security. This is an onsite position in Tulsa, Oklahoma.

Requirements

Foundational understanding of cybersecurity concepts, including common threats, attack vectors, and defensive controls.
Basic knowledge of networking concepts such as TCP/IP, DNS, routing, firewalls, and network segmentation.
Basic familiarity with Windows and Linux operating systems and system logging.
Exposure through coursework, labs, internships, or personal projects to one or more of the following: SIEM, intrusion detection systems, firewalls, endpoint protection, vulnerability scanning, packet analysis, or email security.
Interest in industrial control systems and operational technology, and willingness to learn how security applies in field and rig environments.
Understanding that safety and operational continuity come first in OT environments.
Strong curiosity, attention to detail, and desire to learn and grow in cybersecurity.
Ability to manage multiple tasks and follow through on assignments in a fast-paced environment.
Clear oral and written communication skills, including the ability to explain technical issues to technical and non-technical audiences.
Strong interpersonal skills and ability to work effectively as part of a team with IT, Engineering, and Operations personnel.

Nice To Haves

Bachelor’s degree in Computer Science, Management Information Systems, Information Assurance, Electrical/Controls Engineering, or a related STEM field, or equivalent experience.
1–3 years of experience in IT support, network administration, security operations, or a related field, including internships.
Exposure to industrial control systems such as PLCs, HMIs, or SCADA, or industrial protocols such as Modbus or EtherNet/IP.
Familiarity with security frameworks such as NIST CSF, CIS Controls, ISA/IEC 62443, or MITRE ATT&CK.
Oil and Gas or other Critical Infrastructure experience, including field or rig-site experience.
Government or Military experience.
Participation in cybersecurity competitions, home labs, or capture-the-flag (CTF) events.
Entry-level certifications such as CompTIA Security+, Network+, CySA+, GIAC GSEC, ISC2 CC, or progress toward OT-focused certifications such as GICSP.

Responsibilities

Monitor IT and OT environments, including corporate systems, rig control systems, and remote-site connectivity, for alarms, suspicious email, anomalous activity, and other signs of malicious activity.
Perform initial triage of security alerts and escalate to senior analysts and engineers as needed.
Analyze available data alongside known Indicators of Compromise, threat intelligence feeds, and other sources to help identify possible malicious activity.
Participate in H&P’s Cybersecurity Incident Response Team and support senior team members during investigations and response.
Work with Rig Operations, Controls Engineering, and field personnel so that OT response actions protect safety, uptime, and process integrity.
Document all actions taken in line with standards.
Support root cause analysis, after-action reporting, and remediation efforts following incidents.
Assist with asset inventory, vulnerability tracking, and risk assessments across IT systems and the rig fleet.
Assist with creating and maintaining written documentation for security processes, procedures, and playbooks.
Build OT/ICS security knowledge through on-the-job training, mentorship, and professional development.

Benefits

Comprehensive medical, dental, vision, and life insurance
Flexible Spending or Health Savings Accounts
401k match
Paid Leave Plans
Parental & Adoption Benefits
Disability Coverage
Employee Assistance Program
Educational Assistance
Learning & Development Opportunities
Flex-scheduling available for qualifying positions to achieve work-life integration