Cloud Security Ops Analyst

Welcome to Conoco Phillips, where innovation and excellence create a platform for opportunity and growth. Come realize your full potential here.

Who We Are

We are one of the world's largest independent exploration and production companies, based on proved reserves and production of liquids and natural gas. With operations and activities in 13 countries, we explore for, develop, and produce crude oil and natural gas globally. We are challenged with an important job to safely find and deliver energy to the world. Our employees are critical to our success, and with them we power civilization.

We're grounded by our SPIRIT Values - safety, people, integrity, responsibility, innovation, and teamwork. These values position us to deliver strong performance in a dynamic business - but not at all costs. We believe it's not just what we do - it's how we do it - that sets us apart.

Fostering an Inclusive Work Environment

To deliver superior performance, we create an environment that respects the contributions and differences of every individual. Wherever possible, we use these differences to drive competitive business advantage, personal growth and, ultimately, create business success.

Job Summary

The Cloud Security Ops Analyst is responsible for the design, implementation, and maintenance of security policies for cloud-based platforms and services, as well as support and enhancement of the cloud security policy platform. This role ensures that cloud environments comply with regulatory requirements, industry standards, and best practices for information security.

The analyst collaborates with cross-functional teams (IT Security, Cloud Architecture, Cloud Engineering, and Release Engineering) to identify risks, develop mitigation strategies, and enable secure cloud adoption across the organization, while also managing and optimizing the policy platform to facilitate seamless policy deployment and enforcement. Delivering a secure agile cloud computing environment is foundational for our Digital Strategy and central to achieving the modernization of the Digital Foundation.

Position Overview

Your responsibilities may include:

* Design automated security and compliance controls including Cloud Architecture, Engineering, Security Engineering and IT Security

* Review new incoming cloud services for shift-left and guard-right security controls to be implemented

* Periodically review existing cloud services for controls to be adjusted/created/retired

* Monitor, report and assign actions to responsible teams as outcomes of cloud security scans from Wiz, Azure Security Center, Amazon Guard Duty, Cloud Custodian, etc.

* Troubleshooting, diagnosing and fixing issues with existing security controls in conjunction with respective teams

* Staying current on security issues impacting cloud services, assessing impact to customers of existing services and identifying use cases for new security solutions

* Manage the review of identified security exceptions/deviations in conjunction with Cloud Architecture

* Provide guidance and training to staff on cloud security best practices and policy adherence

* Enabling the advancement of the cloud vision and strategy for Conoco Phillips

Key Relationships:

* Digital Hosting Teams, including Engineering & Automation, Architecture & Security

* IT Security Team, including Security Architecture, Security Operations, IT Governance

* Business & Technical Capability Teams, including Release Engineering, Capability Owners, Product Managers and Product Owners

Success Profile

To thrive in this role, you'll demonstrate the following leadership competencies:

* Drives Performance:
Delivers positive results through realistic planning to accomplish goals

* Partners Collaboratively:
Builds positive relationships based on trust and seeks collaboration across organizational boundaries to achieve goals

* Leads Change:
Drives thoughtful and pragmatic change, inspires innovative thinking and continuous improvement, and models adaptability through resourcefulness, flexibility, and positivity

* Takes Accountability:
Takes ownership of actions and follows through on commitments by holding others accountable and standing up for…