{bc}
Apply
workday

IT Cyber Security Expert

Occidental Petroleum
Houston, USA
Full-time
Senior · 7+ years experience
Onsite
Discovered 3 weeks ago
linux

Full Job Posting

Key Responsibilities:

  • Administer and maintain the Microsoft Sentinel SIEM platform, including log ingestion, ASIM parsing, normalization, and analytical rule tuning.
  • Develop and manage custom analytics rules, Workbooks (dashboards), threat hunting queries, and alerts to detect security threats.
  • Design, build, and maintain automated workflows and mitigation playbooks using Azure Logic Apps and Sentinel Automation Rules.
  • Integrate data sources across on-prem, cloud, and OT environments to ensure comprehensive visibility.
  • Monitor system health, performance, ingestion costs, and storage utilization (retention/archive tiers) of the Log Analytics Workspaces.
  • Collaborate with SOC analysts, incident responders, Security tools SMEs, and threat hunters to enhance detection.
  • Conduct regular reviews of log sources and parsing accuracy to ensure data quality.
  • Support compliance and audit requirements by maintaining documentation and reporting capabilities.
  • Stay current with emerging threats, SIEM technologies, and best practices.
  • Other security-related projects that may be assigned according to skills.

Required Qualifications:

  • Bachelor’s degree in computer science, cybersecurity, or a related area of study.
  • 7+ years of experience administering enterprise SIEM platforms, with a strong preference for 3+ years of hands-on experience with Microsoft Sentinel.
  • Strong proficiency in Kusto Query Language (KQL), regex, or other query languages used in SIEM platforms, along with experience building custom detection rules.
  • Experience with log ingestion, parsing, and normalization from diverse sources (Windows, Linux, firewalls, cloud services, and OT systems).
  • Familiarity with the MITRE ATT&CK framework and threat detection methodologies.
  • Understanding of incident response workflows and integration with SOAR tools.
  • Ability to work with sensitive and confidential information while maintaining the highest level of confidentiality, professionalism, and ethics.
  • Excellent written and oral communication skills, with the ability to explain complex technical threats clearly to both technical and non-technical audiences.
  • Strong analytical troubleshooting capabilities and a proven ability to work independently while maintaining standard technical documentation.
  • Ability to work dynamically in a collaborative team environment utilizing structured project management frameworks (Waterfall and/or Scrum).
  • Relevant technical certifications are highly preferred, such as Microsoft Certified: Security Operations Analyst Associate (SC-200), CISSP, or GIAC (e.g., GCIH, GCIA).
  • Hands-on experience securing Operational Technology (OT/ICS) environments.
  • Knowledge of data governance and regulatory compliance frameworks governing enterprise and industrial environments (e.g., GDPR, NIST, ISO/IEC 27001 & 27019, or IEC 62443).
  • Ask you to pay for applications, interviews, meetings, processing, training or for any other fees
  • Use recruiting or placement agencies that charge candidates an advance fee of any kind or
  • Request personal information such as passport and bank account details at an early stage of our recruitment process. We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department.
  • All qualified applicants will receive consideration for employment without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Desired Qualifications:

  • Relevant technical certifications are highly preferred, such as Microsoft Certified: Security Operations Analyst Associate (SC-200), CISSP, or GIAC (e.g., GCIH, GCIA).
  • Hands-on experience securing Operational Technology (OT/ICS) environments.
  • Knowledge of data governance and regulatory compliance frameworks governing enterprise and industrial environments (e.g., GDPR, NIST, ISO/IEC 27001 & 27019, or IEC 62443).
  • Recruitment Fraud It has come to our attention various individuals and/or organizations are contacting people falsely pretending to recruit on behalf of Oxy. Please be aware that these recruiting scams and communications do not originate nor are they associated with our recruitment process. All Oxy job postings and offers will require a completed application through our company website. Oxy does not charge a fee at any stage of the recruiting process. We will never: • Ask you to pay for applications, interviews, meetings, processing, training or for any other fees • Use recruiting or placement agencies that charge candidates an advance fee of any kind or • Request personal information such as passport and bank account details at an early stage of our recruitment process. We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department.
  • All qualified applicants will receive consideration for employment without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Occidental Petroleum

Division Order Analyst

Houston, USA

Discovered 5 days agoFull-time

Lease and Contracts Advisor

Houston, USA

Discovered 5 days agoFull-time

Division Order Advisor

Houston, USA

Discovered 5 days agoFull-time

Automation Specialist

Big Spring, USA

Discovered 6 days agoFull-time

Workover & Completions Specialist

Carlsbad, USA

Discovered 6 days agoFull-time

Crude Volumes Accountant

Houston, USA

Discovered 1 weeks agoFull-time

Lease & Contracts Analyst Staff

The Woodlands, USA

Discovered 2 weeks agoFull-time

GOA Reliability Engineer

The Woodlands, USA

Discovered 2 weeks agoFull-time