Cybersecurity Analyst I

Join Helmerich & Payne, Inc. in Tulsa, OK (onsite) as a cybersecurity professional focused on protecting safety, uptime, and process integrity across IT and OT environments. This Cybersecurity Analyst I role supports daily monitoring, alert triage, and incident response participation, with structured learning opportunities to build strength in OT/ICS security for rig and field operations.

What you will do

• Monitor IT and OT environments, including corporate systems, rig control systems, and remote site connectivity, for alarms, suspicious email, anomalous activity, or other malicious indicators.
• Triage security alerts and escalate to senior analysts and engineers when additional investigation or action is needed.
• Analyze alert and telemetry data using Indicators of Compromise, Threat Intelligence feeds (for example, CISA advisories), and other available sources to identify potential malicious activity.
• Support Helmerich & Payne’s Cybersecurity Incident Response Team by contributing to investigations and response activities under the guidance of senior team members.
• Learn how to collaborate with Rig Operations, Controls Engineering, and field personnel so response actions in OT environments protect safety, uptime, and process integrity.
• Document actions taken according to established standards.
• Assist with Root Cause Analysis, After-Action Reporting, and Remediation following incidents.
• Contribute to asset inventory, vulnerability tracking, and risk assessments across IT systems and the rig fleet.
• Help create and maintain written security documentation, including processes, procedures, and playbooks.
• Build OT/ICS security knowledge through on-the-job training, mentorship, and ongoing professional development.

Qualifications

• Foundational understanding of cybersecurity concepts, including common threats, attack vectors, and defensive controls.
• Basic networking knowledge such as TCP/IP, DNS, routing, firewalls, and network segmentation.
• Basic familiarity with Windows and Linux and system logging.
• Exposure through coursework, labs, internships, or personal projects to one or more of: SIEM, Intrusion Detection Systems, Firewalls, Endpoint Protection, Vulnerability Scanning, Packet Analysis, Email Security.
• Interest in industrial control systems and operational technology, plus willingness to learn how security applies in field and rig environments.
• Understanding that safety and operational continuity come first in OT environments.
• Strong curiosity, attention to detail, and desire to learn and grow.
• Ability to manage multiple tasks and follow through in a fast-paced environment.
• Clear oral and written communication skills, including the ability to explain technical issues to both technical and non-technical audiences.
• Strong interpersonal skills and the ability to work as part of a team with IT, Engineering, and Operations.

Technologies you may work with

• SIEM, Intrusion Detection Systems, Firewalls, Endpoint Protection, Vulnerability Scanning, Packet Analysis, Email Security
• Windows, Linux
• TCP/IP, DNS, routing, network segmentation
• Indicators of Compromise, Threat Intelligence feeds, CISA advisories
• Modbus, EtherNet/IP, PLCs, HMIs, SCADA
• NIST CSF, CIS Controls, ISA/IEC 62443, MITRE ATT&CK

Benefits

• Comprehensive medical, dental, vision, and life insurance
• Flexible Spending or Health Savings Accounts
• 401k match
• Paid Leave Plans
• Parental & Adoption Benefits
• Disability Coverage
• Employee Assistance Program
• Educational Assistance
• Learning & Development Opportunities
• Flex-scheduling available for qualifying positions to support work-life integration

Not a must, but a plus

• Bachelor’s degree in Computer Science, Management Information Systems, Information Assurance, Electrical/Controls Engineering, or a related STEM field, or equivalent experience
• 1–3 years of experience in IT support, network administration, security operations, or a related field, including internships
• Exposure to industrial control systems such as PLCs, HMIs, or SCADA, or to industrial protocols such as Modbus or EtherNet/IP
• Familiarity with security frameworks such as NIST CSF, CIS Controls, ISA/IEC 62443, or MITRE ATT&CK
• Oil and Gas or other Critical Infrastructure experience (for example, Electric Power, Pipeline, Manufacturing, Water), including field or rig-site experience
• Government or Military experience
• Participation in cybersecurity competitions, home labs, or capture-the-flag (CTF) events
• Entry-level certifications such as CompTIA Security+, Network+, CySA+, GIAC GSEC, ISC2 CC, or progress toward OT-focused certifications such as GICSP