CSIRT Vulnerability Analyst: Protect Global Infra

Statkraft; Oslo fylke; Hybrid; NOK 700,000 - 900,000; Full time

Benefits offered by this job

Unlimited learning opportunities

Global network of experts

Flexible working solutions

Competitive terms of employment

Job summary

Statkraft in Oslo is seeking an experienced Vulnerability Analyst to join the CSIRT team. You will identify, analyze, validate, and prioritize vulnerabilities across our digital assets, coordinating remediation with infrastructure, cloud, and development teams.

You will manage the vulnerability lifecycle, perform scans with Tenable/Nessus and Defender Vulnerability Management, and translate technical findings into actionable risk guidance.

Qualifications

• Experience in cyber security, vulnerability management, security operations, incident response, or related field.
• Practical experience with vulnerability assessment and scanning tools such as Tenable/Nessus or Defender Vulnerability Management.
• Strong analytical skills to translate findings into risk-based remediation guidance.
• Fluency in Norwegian and English, both written and spoken.

Responsibilities

• Performing vulnerability assessments across Statkraft’s digital infrastructure, applications, cloud environments, and assets using commercial and open-source tools.
• Analyzing vulnerabilities to assess risk and prioritize remediation.
• Investigating vulnerabilities and threats, assess their potential relevance to Statkraft, and provide actionable recommendations to system owners and technical teams.
• Following up on identified vulnerabilities and working with IT, development, cloud, and system owners to support timely and risk-based remediation.
• Exploring and applying AI to improve vulnerability analysis, prioritization, enrichment, and efficiency, while critically assessing the quality and reliability of AI-generated insights.
• Contributing to the continuous improvement of vulnerability management processes, tools, automation, dashboards, and technical capabilities.
• Supporting security investigations, threat hunting, and security assessments where vulnerability expertise can help identify exposure and reduce cyber risk.

Skills

Cyber security

Vulnerability management

Security operations

Incident response

Analytical thinking

English

Norwegian

Tools

Tenable/Nessus

Microsoft Defender Vulnerability Management

SAST/DAST tooling

Job description

Statkraft in Oslo is seeking an experienced Vulnerability Analyst to join the CSIRT team. You will identify, analyze, validate, and prioritize vulnerabilities across our digital assets, coordinating remediation with infrastructure, cloud, and development teams.

You will manage the vulnerability lifecycle, perform scans with Tenable/Nessus and Defender Vulnerability Management, and translate technical findings into actionable risk guidance.