Cybersecurity Analyst I

At H&P, our people are our strength.

Since 1920, Helmerich and Payne has been the industry’s most trusted partner in drilling productivity and reliability. As the world changes, so does our approach. We are changing the landscape of drilling by using cutting-edge rig technologies and drilling solutions to build upon a century of success, all while continuing to deliver better outcomes for our customers. 

At H&P, our people are our strength. We strive to continually lead with our Core Values that enable employees to develop on their H&P Journey. We believe that doing the right thing means creating a more diverse, equitable, and inclusive workplace that empowers our people to bring their authentic selves to work every day. 

Some companies offer career paths. We offer a Journey of a Lifetime. Let's go far, together.

Hear directly from our employees, and leaders about their unique journeys at Helmerich and Payne. 

Location: Tulsa, OK

Work Type: Onsite

#LI-Onsite

What you will do: 

• Monitor IT and OT environments, including corporate systems, rig control systems, and remote site connectivity, for alarms, suspicious email, anomalous activity, or other signs of malicious activity.
• Perform initial triage of security alerts, escalating to senior analysts and engineers as needed.
• Analyze available data alongside known Indicators of Compromise, Threat Intelligence feeds (e.g., CISA advisories), and other sources to help identify possible malicious activity.
• Participate as a member of H&P's Cybersecurity Incident Response Team, supporting senior team members during investigations and response.
• Learn to work with Rig Operations, Controls Engineering, and field personnel so response actions in OT environments protect safety, uptime, and process integrity.
• Make sure all actions taken are properly documented in line with standards.
• Support Root Cause Analysis, After-Action Reporting, and Remediation Efforts following incidents.
• Assist with asset inventory, vulnerability tracking, and risk assessments across IT systems and the rig fleet.
• Assist with creating and maintaining written documentation for security processes, procedures, and playbooks.
• Build your knowledge of OT/ICS security through on-the-job training, mentorship, and professional development.

What you need:

• Foundational understanding of cybersecurity concepts, including common threats, attack vectors, and defensive controls.
• Basic knowledge of networking concepts such as TCP/IP, DNS, routing, firewalls, and network segmentation.
• Basic familiarity with Windows and Linux operating systems and system logging.
• Exposure, through coursework, labs, internships, or personal projects, to one or more of the following: SIEM, Intrusion Detection Systems, Firewalls, Endpoint Protection, Vulnerability Scanning, Packet Analysis, or Email Security.
• Interest in industrial control systems and operational technology, and willingness to learn how security applies in field and rig environments.
• An understanding that safety and operational continuity come first in OT environments.
• Strong curiosity, attention to detail, and a desire to learn and grow in cybersecurity.
• Ability to manage multiple tasks and follow through on assignments in a fast-paced environment.
• Clear oral and written communication skills, with the ability to explain technical issues to both technical and non-technical audiences.
• Strong interpersonal skills and ability to work effectively as part of a team with IT, Engineering, and Operations personnel.

Not a must, but a plus:

• Bachelor's degree in Computer Science, Management Information Systems, Information Assurance, Electrical/Controls Engineering, or a related STEM field, or equivalent experience
• 1–3 years of experience in IT support, network administration, security operations, or a related field, including internships
• Exposure to industrial control systems such as PLCs, HMIs, or SCADA, or to industrial protocols such as Modbus or EtherNet/IP
• Familiarity with security frameworks such as NIST CSF, CIS Controls, ISA/IEC 62443, or MITRE ATT&CK
• Oil and Gas or other Critical Infrastructure experience (e.g., Electric Power, Pipeline, Manufacturing, Water), including field or rig-site experience
• Government or Military experience
• Participation in cybersecurity competitions, home labs, or capture-the-flag (CTF) events
• Entry-level certifications such as CompTIA Security+, Network+, CySA+, GIAC GSEC, ISC2 CC, or progress toward OT-focused certifications such as GICSP

What we offer:

At H&P, our commitment to our people is at the forefront, and that includes benefits that provide employees a sense of health and financial security. We know that life continues outside of employment and actively caring of our people is our priority.

• Comprehensive medical, dental, vision, and life insurance 
• Flexible Spending or Health Savings Accounts
• 401k match 
• Paid Leave Plans
• Parental & Adoption Benefits
• Disability Coverage
• Employee Assistance Program 
• Educational Assistance 
• Learning & Development Opportunities 
• Flex-scheduling available for qualifying positions to achieve work-life integration

The job level and associated compensation for this position will be determined based on the candidate’s experience, qualifications, and alignment with the role’s requirements. Final compensation for this role may vary depending on individual factors.

H&P is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

Thank you for your interest in joining our team!