OT Security Analyst

Whitecap Resources Inc. is a leading Canadian energy company committed to delivering reliable returns to shareholders through the responsible development of oil and natural gas assets in the Western Canadian Sedimentary Basin. With a strong track record of profitable growth and a sustainable dividend, Whitecap delivers long-term value to investors, supported by investment-grade financial strength.

Since September 2009, Whitecap has experienced remarkable growth, increasing production from 850 boe/d to over 365,000 boe/d. We have unconventional and conventional assets exclusively focused in Western Canada and the asset base includes the Weyburn EOR Project. As a majority owner and operator of the Weyburn EOR Project, annually we safely sequester approximately 1.5 million tonnes of CO2 making it a unique project within our portfolio. We currently employ 1,200 people, including our valued contract staff.

At Whitecap, our corporate culture is entrepreneurial. We strive to create a culture of purpose and integrity where initiative and innovation are encouraged and valued. Our corporate philosophy allows us to develop skills, collaborate alongside our teammates, and ultimately have a fulfilling career.

Purpose:

The OT Security Analyst will work closely with the OT Security team, provide day-to-day operational support for OT environments, act as an internal SOC team member, and complete Security-related projects as directed. 5-10 years of security experience and or a combination of OT experience is an asset.

Main Responsibilities & Activities:

• Provide tier 1 & 2 day-to-day security operations support.
• Participate in reviewing and analyzing security-related events, assessing criticality and priority.
• Create new processes and workbooks to automate and streamline investigative processes.
• Work with SIEM technologies to ingest new data sources, run advanced correlation. processes, create new content, and use visualization and automation techniques.
• Manage logging from various sources with the goal of gaining better visibility and insights.
• Maintain compliance with industry standards and government regulations, ensuring security and reliability in automation systems.
• Assist in the development of tools to monitor network security protocols and overall performance.
• Familiarity with OT specific protocols such as Modbus and CIP.
• Manage the ongoing enforcement of security policies, standards, and procedures.
• Able to identify vulnerabilities and recommend mitigations.
• Update hardware and software asset inventories.
• Ensure proper IT-OT network segmentation to prevent lateral threat movement.
• Deploy and integrate Endpoint Detection and Response solutions across OT environments.
• Deploy, configure, and manage secure network segmentation initiatives.
• Understanding the distinct differences between IT and OT.
• Familiarity with firewalls and network segmentation.

Knowledge, Skills & Abilities:

• Ability to analyze, collaborate, and communicate within cross-functional team.
• Associate Diploma or Bachelors of Science degree in Computer Science or Information Technology related program.
• Basic understanding of computer hardware, software and network concepts.
• Experience with scripting language such as Python or PowerShell.
• 5-10 years of experience as a security analyst, or similar.
• SSCP or CCSP level knowledge/experience (certification preferred).
• Independently motivated individual with analytical and problem-solving abilities.
• Self-starter capable of working independently with minimal supervision.
• Exceptional abilities to troubleshoot and collaborate to resolve incidents.
• Strong documentation and communication skills is required.
• Team player capable of learning and contributing to shared projects and goals.
• A trustworthy individual, capable of safeguarding confidential information.
• Oil and Gas & Operational Technology (OT), ICS and SCADA experience a benefit.