Senior Security Operations Engineer

About CogniteEmbark on a transformative journey with Cognite, a global SaaS forerunner in leveraging data to unravel complex business challenges through our cutting-edge Cognite Data Fusion (CDF) platform. We were awarded the 2022 Technology Innovation Leader for Global Digital Industrial Platforms & Cognite was recognized as 2024 Microsoft Energy and Resources Partner of the Year. In the realm of industrial digitalization, we stand at the forefront, reshaping the future of Oil & Gas, Manufacturing and Energy sectors. Join us in this venture where data meets ingenuity, and together, we forge the path to a smarter, more connected industrial future.
Learn more about Cognite hereCognite Product Tour 2024Cognite Product Tour 2023Data Contextualization Masterclass 2023
Our valuesImpact: Cogniters strive to make an impact in all that they do. We are result-oriented, always asking ourselves.Ownership: Cogniters embrace a culture of ownership. We go beyond our comfort zones to contribute to the greater good, fostering inclusivity and sharing responsibilities for challenges and success. Relentless: Cogniters are relentless in their pursuit of innovation. We are determined and deliverable (never ruthless or reckless), facing challenges head-on and viewing setbacks as opportunities for growth. 


About the role and the teamThe Security Operations team’s mission: “Through detection, enable teams and individuals to respond and recover. With analysis, improve the organization's ability to identify and protect”.
In the context of NIST Cybersecurity Framework (CSF) the Cognite Security Operations core activities reside in Detect and Protect. However, in order to ensure velocity and continuous improvement we have to avoid having a “throw-over-the-fence” culture - this is deeply embedded in Cognite’s culture and reflected in our values. Orchestration and automation are key to achieving the above. The Security Operations team should always seek to offload work to software and machines. We should avoid doing the same thing twice in all our work.
You will have the opportunity to shape and influence how we work as a team and as an organization, e.g. by presenting your proposals in an architecture forum, receiving feedback from product managers, developers, engineers and architects.
As a team we support the development of junior staff members to gain greater perspective on IT and OT security, and customer expectations and usage patterns.

Role and responsibilities

• As a Senior Security Operations Engineer in Cognite Security Operations, you are at the center of security events. To achieve our mission, we are integrated in the business. This applies to the input the team receives and how the output is delivered. We base and prioritize our work on business needs, and in return, we provide actionable insights and, where possible, concrete actions. 

Organizational preparedness
• Threat and vulnerability discovery: Continuous work to improve Cognite’s risk posture by proactively hunting for threats (internal and external) and detecting vulnerabilities across all environments.
• Threat modeling: Facilitate and/or be a subject-matter expert in threat modeling, where teams identify threats and corresponding mitigations.
• Culture and awareness: Contribute to Cognite’s security culture and awareness program by identifying areas of improvement using operational insight and actively participating in the development and delivery of training. 

Real-time posture 
• Security Operations Rotation: The team has a shield rotation, in which the team members act as the initial point of contact for signals we receive. 
• Triage signals (events, alerts, and requests): If possible, respond initially and escalate to applicable individuals/teams when required. 
• Security Response Lead (SRL): SRL is a situational role that all team members can assume as part of Congite’s incident process. Contributions to the response and recovery include (but is not limited to) threat hunting, log investigations, configuration changes and reporting.

Drive improvements 
• Analyze: Perform queries and analyze results across a large amount of da