Statkraft Cybersecurity Department (MIS) is looking for a new colleague to strengthen the CSIRT team. Statkraft Cyber Security Department consists of GRC, Security Architecture and CSIRT teams working hand in hand protecting Statkraft’s assets from cyber threats and enabling the business providing robust and secure IT security services. The Cyber Security Department is part of the Statkraft IT Department, which consist of over 200 highly engaged employees. Statkraft IT is the Statkraft Group’s IT service provider and Digitalization Centre of Expertise, delivering a full set of services from business development, change management, projects, application development to operational services.  

The mission of Statkraft CSIRT is to avoid or minimize business impact for attempted or conducted cyber attacks against Statkraft's assets. Our CSIRT acts as a central hub of contact, correlation and coordination of security events based on current threat situation, business risk appetite and regulatory requirements. We are looking for a new CSIRT team member who will manage and develop our detection and response solutions.  

CSIRT Security Engineer role:  
 
As a Security Engineer dedicated to CSIRT, you are responsible for the lifecycle management of an exciting portfolio of technology applications. You will work closely with your colleagues in both CSIRT and departments that provide underlying basic IT infrastructure. You will play an important role in which your contribution help protect critical infrastructure in several countries.  

• Design, implementation, configuration and management of applications such as IDS/IPS, SIEM, EDR, antivirus and vulnerability scanners 

• Manage application version updates, compatibility, user rights and access for the CSIRT team 

• Work directly with the CSIRT to understand operational needs and automation potential, then design and implement solutions, dashboards, integrations, etc. 

• Constantly seek to improve, resolve, and streamline tools and processes to meet our operational challenges
  

• Adapt and make use of security use-case to continually improve and tune SIEM use cases  

• Follow change management procedures, schedule, install, troubleshoot and support software and hardware improvements, upgrades, patches, reconfigurations, and/or deployment
  

• Ensure compliance with IT Security policies 

 
Your profile:  

• Expertise with application and system maintenance 

• General expertise on network and network topologies (i.e. IPv4, IPv6, MPLS, VPN, VLAN, etc) 

• General expertise on Cloud based solutions like AWS, Azure and others 

• General expertise on server operating systems and hardware equipment  

• Scripting skills with a focus on automation, in one of the following languages: Python, shell, Powershell would be beneficial  

• Experience in system integration including the design, development, enhancement of IT systems would be beneficial but not mandatory  

• Experience with Splunk/SIEM operations and maintenance incl Splunk ES administration would be beneficial but not mandatory 

• Experience to build and implement event correlation rules, logic, and content in Splunk/SIEM system would be beneficial but not mandatory 

• Experience with security solutions or SOC/CSIRT/CERT infrastructure would be beneficial but not mandatory 

• Knowledge of applicable data privacy practices and laws
  

• Fluent expression in both Norwegian and English is required, both in oral and writing

 
Statkraft offers: 

• Professional and personal development in an exciting company 

• A positive working environment characterised by competence, responsibility and innovation 

• A diverse workplace with regard to gender, age and cultural background 

• Competitive terms of employment and excellent benefit schemes