CSIRT Security Operations Analyst

The Statkraft CSIRT team is part of the Cyber Security Department within Statkraft. Our mission is to avoid or minimize business impact from attempted or conductedcyber-attacks against Statkrafts assets. We act as a central hub of contact correlation and coordination of security events based on current threat situation business risk appetite and regulatory requirements. We are now looking for a new team member who will perform investigations of potential cyber-attacks and intrusion attempts and conduct vulnerability assessments throughout the enterprise using commercial and open-source assessment tools. 

As Security Operations Analyst you will play an important role in which your contribution help protect critical infrastructure in several countries. You will get the opportunity to influence both your own working day and Statkrafts further development within cyber our team you will work with cutting edge cyber security systems while sharpening and developing your own professional and personal abilities. 

Your responsibilities include: 

• Monitoring assessing and responding to received warnings alerts and requests 
• Analysing security events in cooperation with colleagues vendors and relevant partners (KraftCERT/InfraCert NCSC) 
• Performing vulnerability assessments evaluate the risk they represent and provide system owners with analysis and recommendations of key risks and remediation plans 
• Proactive and reactive threat hunting within networks and endpoints 
• Perform in-depth technical investigations during security incidents including data collection intrusion analysis and forensics 
• Following up on vulnerabilities and security incidents and ensure sufficient measures are implemented 
• Participating in securityevaluations and risk assessments of ongoing and new solutions and services in cooperation with our Security Architects 
• Contributing to implement relevant policies processes and tools to ensure compliance and to increase quality and efficiency 

Qualifications :

To be successful in your role we believe you have: 

• A burning interest in cyber security 
• Solid work experience from a SOC or Incident Response Team 
• Experience with performing vulnerability assessments 
• Experience with analysis and tools for collecting and analysing network and host logs (SIEM IDS EDR etc.) 
• In-depth understanding of IP protocols network and operating systems 
• Fluency in Norwegian and English both spoken and written 

These skills and experiences would be beneficial: 

• Familiarity with cyber security frameworks (such as Cyber Kill Chain MITRE ATT&CK) penetration testing and IT system audits 
• Scripting skills in Python PowerShell KQL Perl Go Bash or similar
• FrontierAI and/or Splunk experience would be an advantage 
• Ability to demonstrate analytical expertise close attention to detail excellent critical thinking logic and solution oriented

Additional Information :

What we offer: 

• Unlimited learning opportunities at various levels of the organization 
• The chance to grow your career alongside a truly global network of experts leaders specialists and graduates from different countries and backgrounds 
• The opportunity to work somewhere with pride and be able to honestly say My work is contributing to saving the planet 
• A work culture that puts emphasis on the individual offering flexible working solutions and work-life balance principles 
• Statkraft offers competitive terms of employment and benefits schemes and were a trusted employer that puts the safety of our people first. We believe that a safe and healthy working environment is a matter of choice not chance 

Statkraft manages critical infrastructure and services in several countries. The applicant must be eligible for Norwegian security clearance and authorization. 
 
Statkrafts vision is to renew the way the world is powered. To navigate the complex journey ahead we need every voice at the table. We therefore work actively to be a diverse and inclusive workplace and welcome all applicants regardless of background gender age sexual orientation religious belief ethnicity nationality or disability. 
 

Application deadline:9th of August

Location:The position will require physical presence at the main office in Lilleaker Oslo Norway. 

Remote Work :

No

Employment Type :

Full-time