CSIRT Threat Analyst

Company Description

Statkraft has been making clean energy possible for over a century. That is what we offer. 125 years of unrivalled expertise in supplying the world with what it needs most. We envision a world that runs entirely on renewable energy. Because in the fight against climate change, we do not see renewable energy as part of the solution – we believe it must be the solution. With us, you will shape a career that is truly forward-facing with many amazing opportunities and offerings to match.

But there is more work to be done – that is why we need you to join!

Job Description

The Statkraft CSIRT team is part of the Cyber Security Department within Statkraft. Our mission is to avoid or minimize business impact for attempted or conducted cyber-attacks against Statkraft’s assets. We act as a central hub of contact, correlation and coordination of security events based on current threat situation, business risk appetite, and regulatory requirements.  We are now looking for a new motivated CSIRT Team member who will work in the field of Cyber Threat Intelligence.

As a Threat Analyst you will have a particular focus on the tactical and technical spectrum of cyber threat intelligence. You will be involved in research and assessment of threats and adversary tradecraft, apply intelligence in various operational deliverables, provide curated intelligence reports to operational functions and our business areas, and contribute with continuous improvement of our processes and tools.

The role will write tactical and operational intelligence reports related to cyber threats agains the energy sector. You will help analyse cyber security incidents, share technical indicators with our team and partners, and provide intelligence helping develop advanced detection rules for our monitoring and detection systems. In the event of cyber security incidents, you will participate in incident response and crisis management as a tactical analyst. Your contribution in this role will be vital to help protect critical infrastructure in all our countries.

Your responsibilities include:

• Develop and provide threat hypothesis of adversaries’ behaviour and perform open- and closed research to formulate detection strategies of said behaviour, and response/mitigation recommendations associated with specific threats and adversary tradecraft
• Gather and analyse threat intelligence from a variety of sources (e.g. partner sharing, internal detections, social media, intelligence reports, etc) to track and report on the evolving threat landscape and TTPs
• Researching and analysing malware, attack campaigns, threat groups and their tactics, techniques, and procedures (TTP) as observed in our threat landscape
• Provide guidance to our security engineers on detection strategies and logics
• Manage our MISP installation, indicator ingestion, and evaluate new threat feeds for MISP

Qualifications

To be successful in your role, we believe you have:

• Experience with the following areas:
  • Threat intelligence methods, frameworks, and standards
  • Threat intelligence platforms, such as MISP or similar
  • Technical analysis methods, processes, and tools
  • Hunting and identifying malicious behaviour in large data sets/telemetry
• Experience with researching how threat groups operate, and understand tactics, techniques, and procedures as part of threat campaigns
• Experience with technologies and solutions used for security monitoring and response capabilities
• Fluency in Norwegian and English, both spoken and written

These skills and experiences would also be beneficial:

• Strong analytical skills with the ability to synthesise complex and contradictory information
• Creative problem solving and solution-oriented mindset
• Self-driven and independent with the ability to successfully prioritize tasks with minimal oversight
• Strong communicator that conveys complex technical information both clearly and concisely to diverse audiences
• Relevant industry certifications and training is an advantage

Additional Information

What We Offer

• Unlimited learning opportunities at various levels of the organization
• The chance to grow your career alongside a truly global network of experts, leaders, specialists, and graduates from different countries and backgrounds
• The opportunity to work somewhere with pride, and be able to honestly say “My work is contributing to saving the planet”
• A work culture that puts emphasis on the individual, offering flexible working solutions, and work-life balance principles
• Statkraft offers competitive terms of employment and benefits schemes, and we’re a trusted employer that puts the safety of our people first. We believe that a safe and h