Cyber Security Analyst

The NORMA Security Operations Center (SOC) is responsible for monitoring, detecting, and responding to cyber incidents on our members’ vessels’ IT and OT infrastructure as well as traditional IT infrastructure. The SOC team is the first line of defence to detect attacks on our members’ infrastructure. The team is also responsible for responding to and mitigating ongoing attacks in dialogue with the affected member. The team closely cooperates with the NORMA Intelligence team to develop relevant detection capabilities. In the event of a cyber incident at one of our members NORMA Cyber can provide incident response and crisis management services. 

Cyber Security Analyst

As a cyber security analyst in our SOC you will monitor, analyse and respond to cyber security incidents for our members in the Norwegian maritime sector. You will also participate in incident response and offer mitigation advice to the affected member. In dialogue with the member you will set up effective logging and monitoring capabilities to ensure visibility and counter cyber threats.

You will also have the opportunity to develop internal tooling to automate and increase effectiveness of analysis tasks.

We are seeking someone with the drive to develop, shape and improve our Centre.

Desired qualifications:

• Bachelor's or Master's in computer science/engineering, information security, cyber security or other relevant field, OR demonstrated competence through work experience, certifications and courses
• Good oral and written communication skills in Norwegian and English
• Experience with log analysis (Such as Windows Event, firewall, access, audit, etc)
• Experience with network traffic analysis using Wireshark or similar tools
• Experience with and understanding of tools for: EDR, SIEM/SOAR, UBA
• Knowledge of scripting or programming in Python or other relevant programming/scripting languages
• Solid understanding of security and network protocols
• Applicants must qualify for a security clearance up to minimum HEMMELIG

Knowledge/Experience with any of the following is desirable:

• ACH, Diamond Model, Cyber Kill Chain, Pyramid of Pain, MITRE ATT&CK
• Object Oriented Programming in C#/.Net, Java or other relevant programming languages
• Operational Technology or maritime IT infrastructure
• Cloud technologies
• Malware analysis, static and/or dynamic

Personal characteristics:

• Strong analytical and problem-solving skills
• Social and self-driven
• High degree of integrity
• Creative but systematic

We offer:

• Competitive compensation
• Great insurance and pension schemes
• Opportunity for growth and career advancement in a dynamic and evolving industry
• A supportive and inclusive work environment that nurtures your skills and talents
• Flexibility, with options to work partly remote