CSIRT Vulnerability Analyst

About the Position

We are looking for a CSIRT Vulnerability Analyst to join Statkraft's Cyber Security department in Oslo, Norway. Our mission is to avoid or minimize business impact from attempted or conducted cyber-attacks against Statkraft’s assets. As a Vulnerability Analyst, you will play a crucial role in protecting our digital assets, infrastructure, and applications by identifying, analyzing, validating, prioritizing, and following up on vulnerabilities across our technology environment.

Responsibilities

• Perform vulnerability assessments across Statkraft’s digital infrastructure, applications, cloud environments, and assets using commercial and open-source tools.
• Analyze identified vulnerabilities and combine technical findings, threat intelligence, and business context to assess risk and prioritize remediation.
• Investigate emerging vulnerabilities and threats, assess their potential relevance to Statkraft, and provide actionable recommendations to system owners and technical teams.
• Follow up on identified vulnerabilities and work with IT, development, cloud, and system owners to support timely and risk-based remediation.
• Explore and apply AI to improve vulnerability analysis, prioritization, enrichment, and efficiency, while critically assessing the quality and reliability of AI-generated insights.
• Contribute to the continuous improvement of vulnerability management processes, tools, automation, dashboards, and technical capabilities.
• Support security investigations, threat hunting, and security assessments where vulnerability expertise can help identify exposure and reduce cyber risk.

Requirements

• Experience in cyber security, vulnerability management, security operations, incident response, or related technical security field.
• Practical experience with vulnerability assessment and scanning tools such as Tenable/Nessus, Microsoft Defender Vulnerability Management, or similar platforms.
• Good understanding of vulnerability lifecycles, common attack techniques, operating systems, networks, cloud technologies, and application security.
• Knowledge within the field of AI, especially frontier AI and related consequences for vulnerability management.
• Strong analytical and critical-thinking skills, with the ability to turn technical findings and data into clear risk assessments and recommendations.
• Scripting or query skills in Python, PowerShell, KQL, Go, Bash, or similar technologies are an advantage.
• Fluency in Norwegian and English, both spoken and written.

Nice to Have

• Solid networking and communication skills with the ability to easily connect with new people.
• Independent personality able to work well both solo and in various teams spanning across countries, cultures, and languages.
• Familiarity with cyber security frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, and/or CIS Controls.
• Experience with Application Security (AppSec), DevSecOps, and SAST/DAST tooling.

We Offer

• Unlimited learning opportunities at various levels of the organization.
• The chance to grow your career alongside a truly global network of experts, leaders, specialists, and graduates from different countries and backgrounds.
• The opportunity to work somewhere with pride, and be able to honestly say “My work is contributing to saving the planet”.
• A work culture that puts emphasis on the individual, offering flexible working solutions, and work-life balance principles.
• Competitive terms of employment and benefits schemes.
• A trusted employer that puts the safety of our people first.

About the Company

Statkraft has been making clean energy possible for over a century. Unrivaled pioneering spirit and a strong commitment towards a more sustainable future. That’s what we offer. Today, we are Europe’s largest renewable energy producer and employ more than 6,000 colleagues around the world. Our vision is clear - to renew the way the world is powered. But there is more work to be done and that is why we need you to help us.

Application deadline: 6th of November

Location: The position will require physical presence at the main office in Lilleaker, Oslo, Norway.

Statkraft manages critical infrastructure and services in several countries. The applicant must be eligible for Norwegian security clearance and authorization.

Statkraft's vision is to renew the way the world is powered. To navigate the complex journey ahead, we need every voice at the table. We therefore work actively to be a diverse and inclusive workplace and welcome all applicants regardless of background, gender, age, sexual orientation, religious belief, ethnicity, nationality, or disability.