We are an integrated energy player. We contribute not only to the entire oil and gas value chain, but we are also proud to have an active role on the energy paradigm shift, through the expansion of our renewable energy generation businesses. We are the largest Iberian producer of solar energy and the leader of our sector in the main global sustainability indexes.

Working at Galp is about bringing more energy to the world. Is about having the ambition to build the future in a sector that is going through a deep transformation, being even more efficient and sustainable.

We are 4 geographies, 49 nationalities and more than 6.000 experiences waiting to be shared.  We value and encourage our people to boost their progress through continuous improvement and innovation, promoting opportunities in different business areas and geographies.

We are looking for people with strength, passion, determination and vision to be part of our growth. Will you accept the challenge?

 

 

 

Cyber Resilience Professional

 

Mission:

The Cyber Resilience Professional will work closely with the Head of CSIRT towards fostering Galp’s Cyber Resilience, supporting Galp’s CSIRT (Cyber Security Incident Response Team)in responding to Cybersecurity Incidents targeting Galp. She/He will be responsible for security incident response, threat hunting, forensic analysis and identification of Lesson-s Learned, in order to protect and maintain the overall security of the enterprise. Working 24/7 against cybercriminals, this person will play a crucial role and must be agile, willing to learn continuously and be able to think outside of the box in order to operate effectively in an ever-changing threat landscape.  

 

What you’ll do:

  • Protecting Galp’s People, Processes and Technology by promptly responding to security incidents and threats from cybercriminals;
  • Proactively hunting for threats and enacting identification, containment, and eradication measures while supporting recovery efforts to maintain the business operating as expected;
  • Act as subject matter expert to provide insight and guidance to colleagues engaging in protective measures and identify Lesson’s Learned from incidents that help improve the maturity against cyber threats;
  • Analyzing cybersecurity incidents and improve incident handling procedures and playbooks;
  • Handling Tier 2 incident escalations from Galp’s SOC (Tier 1) and assist with real-time and continuous (24/7) security event monitoring, response, and reporting;
  • Coordination with appropriate business units during a security incident – management, legal, security, IT operations, marketing and others;
  • Supporting and coordination of a unique SOAR implementation project, including the continuous playbook development, in line with the latest best practices;  
  • Conducting research regarding the latest methods, tools, and trends in digital forensics analysis;
  • Helping improve the overall security posture by independently verifying the security of enterprise systems, and to ensure the timely dissemination of security information to the appropriate stakeholders;

 

What you’ll need:

  • Degree in Computer Engineering (or similar);
  • SANS/GIAC certifications GCIA, GCFA, GCFE, GREM, GASF or similar will be a plus;
  • 3 to 7 years experience in Cyber Security area;
  • Knowledge of security systems and the latest security trends;
  • Knowledge in Cyber Security Incident handling;
  • Knowledge of digital forensics methodology as well as security architecture, system administration, and networking;
  • Knowledge of operating systems including Linux/Unix and Windows;
  • Experience with programming languages such as Python, Perl, C/C++, PowerShell, etc is a plus;
  • Knowledge in playbook development and best practices is plus;
  • Excellent written and verbal communication skills;
  • Understanding digital native and emerging technologies;
  • A pragmatic approach in identifying, mitigating and resolving risks;
  • Excellent organization, time management, problem-solving skills and attention to detail;
  • Resilient and Can do attitude;
  • Fluent in English;
  • Ability to work as part of a team – “If you want to go fast, go alone. If you want to go far, go together ”.

 

 

Deadline for applications:

 

January, 22, 2021

 

 

 

Diversity Commitment

At Galp, we promote equality of opportunity and treatment of people regardless of gender, religion or belief, disability, age, sexual orientation, and race. We believe that equality creates value and strengthens a Group culture.

Ingressei na Galp/Petrogal em 2014 e desde então tenho trabalhado com os ativos de Potiguar offshore. No segundo ano de empresa, também me tornei TCR destes ativos e pude compreender um pouco mais além da área técnica. Têm sido anos de intenso aprendizado, com reuniões, horas em frente a estação de trabalho, acompanhamento de poços e por vezes participação de outros projetos, como avaliação de outros activos, o que me deixa muito feliz em ter a possibilidade de ver novas áreas, geologia diferente e talvez a possibilidade de ajudar a empresa a aumentar seu portfólio com boas oportunidades… Concomitantemente, ao meu crescimento profissional, vivenciei a mudança da presidência da empresa, da sede para o Rio de Janeiro, dos valores e da missão. Foram anos de cursos, muito trabalho, aprendizado e acompanhamento para se adequar a nova forma de trabalho. Dentre os pontos positivos de trabalhar na Galp/Petrogal, destaco o bom tratamento com os colaboradores, sempre humanizado e com a compreensão que em certos momentos da vida são necessários, a parceria entre os colegas, reconhecimento do trabalho executado e sólido portfólio. Ainda sobre a relação com os colegas, posso dizer que na maior parte das vezes é colaborativa, sempre há alguém disposto a te ajudar com uma boa ideia ou sentar ao seu lado para discutir um problema de modo a saná-lo.

Patricia Takayama