CSIRT Vulnerability Analyst — Impact & Unlimited Learning

Statkraft AS; Oslo fylke; On-site; NOK 900,000 - 1,200,000; Full time

Benefits offered by this job

Unlimited learning opportunities

Global network of experts

Flexible working solutions and work–l–

Competitive terms of employment

Job summary

Statkraft is seeking an experienced Vulnerability Analyst to identify, analyze, validate, and prioritize vulnerabilities across our technology environment. The role focuses on vulnerability scanning, risk-based prioritization, remediation tracking, and clear guidance to IT, cloud, and development teams.

You will work in a CSIRT context within the Cyber Security department to protect critical infrastructure, with opportunities to grow in a global team and influence security posture across

Qualifications

• Experience in cyber security, vulnerability management, security operations, or incident response.
• Practical experience with vulnerability assessment and scanning tools such as Tenable/Nessus, Microsoft Defender Vulnerability Management, or similar platforms.
• Good understanding of vulnerability lifecycles, common attack techniques, operating systems, networks, cloud technologies, and application security.
• Knowledge within AI, especially frontier AI and related consequences for vulnerability management.
• Strong analytical and critical-thinking skills, with the ability to turn technical findings and data into clear risk assessments and recommendations.
• Scripting or query skills in Python, PowerShell, KQL, Go, Bash, or similar technologies are an advantage.
• Fluency in Norwegian and English, both spoken and written.

Responsibilities

• Performing vulnerability assessments across Statkraft’s digital infrastructure, applications, cloud environments, and assets using commercial and open-source tools.
• Analyzing identified vulnerabilities and combine technical findings, threat intelligence, and business context to assess risk and prioritize remediation.
• Investigating emerging vulnerabilities and threats, assess their potential relevance to Statkraft, and provide actionable recommendations to system owners and technical teams.
• Following up on identified vulnerabilities and working with IT, development, cloud, and system owners to support timely and risk-based remediation.
• Exploring and applying AI to improve vulnerability analysis, prioritization, enrichment, and efficiency, while critically assessing the quality and reliability of AI-generated insights.
• Contributing to the continuous improvement of vulnerability management processes, tools, automation, dashboards, and technical capabilities.
• Supporting security investigations, threat hunting, and security assessments where vulnerability expertise can help identify exposure and reduce cyber risk.

Skills

Cybersecurity experience

Vulnerability management

Vulnerability scanning tools

Vulnerability lifecycle understanding

Norwegian security clearance

Norwegian & English fluency

AI in vulnerability management

Scripting / query (Python, PowerShell,

DevSecOps / AppSec tooling

Tools

Tenable/Nessus

Microsoft Defender Vulnerability Management

SAST/DAST tooling

Job description

Statkraft is seeking an experienced Vulnerability Analyst to identify, analyze, validate, and prioritize vulnerabilities across our technology environment. The role focuses on vulnerability scanning, risk-based prioritization, remediation tracking, and clear guidance to IT, cloud, and development teams.

You will work in a CSIRT context within the Cyber Security department to protect critical infrastructure, with opportunities to grow in a global team and influence security posture across