Security Operations Centre Security Analyst

930000 Motorola Solutions Norway AS; Oslo fylke; On-site; NOK 600,000 - 900,000; Full time

Benefits offered by this job

Flexible working hours

Work from home when tasks allow it

6 weeks paid vacation

On-call allowance and overtime

Health insurance

Job summary

Motorola Solutions Norway AS is expanding its operational security team to strengthen Nødnett cyber readiness. The security analyst will monitor, analyze, and respond to threats, coordinating with an external SOC and CSIRT to detect and mitigate incidents early.

Proactive investigation, rigorous documentation, and automation of repetitive tasks are key aspects of the role. Required are practical log analysis skills, experience from SOC/CSIRT, and strong communication in Norwegian/English.

Qualifications

• Practical experience with log analysis and data platforms.
• Ability to do structured documentation and case handling.
• Ability to work methodically with uncertain and incomplete information.
• Practical experience with scripting or automation for analysis, data collection, or streamlining repetitive tasks.
• Experience with security monitoring, alarm handling, and operational security analysis.
• Experience from SOC, CSIRT, or equivalent operational security functions.

Responsibilities

• Perform the daily security monitoring of Nødnett together with our external SOC.
• Prioritize, verify, and follow up alarms, vulnerabilities, and other relevant deviations and indications of unwanted activity.
• Regularly conduct hypothesis‑driven investigations across relevant data sources.
• Assess vulnerabilities, threats, and risk and contribute to the prioritization of measures during both normal operations and ongoing incidents.
• Ensure appropriate collection, storage, and documentation of observations and technical traces during incidents.
• Document cases, analyses, findings, assessments, and recommendations in a way that supports immediate operational needs, reporting, and subsequent learning and improvement.
• Identify weaknesses in security monitoring, security controls, and work processes and promote and follow up proposals for improvements.
• Ensure strong detection capability through continuous detection development.
• Conduct testing, exercises, and other activities that strengthen the team’s operational capability.
• Adopt and further develop appropriate automation for analysis, data collection, and other repetitive work tasks.

Skills

Log Analysis

Documentation

Scripting

Security Monitoring

SOC/CSIRT

Data Platforms

Tools

EDR Tools

Job description

Company Overview

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Department Overview

The core mission of the security team is to establish and maintain a strong operational cybersecurity readiness for Nødnett. The security team’s main task is to protect Nødnett by detecting and handling threats and vulnerabilities as early as possible. We do this through specialized expertise, clear procedures, disciplined documentation, repeatable working methods, and regular training and exercises, and by working closely with selected operational environments both within and outside Nødnett, including our external SOC provider. The security team is an integrated part of the operational environment that runs Nødnett. Nødnett is Norway’s nationwide digital communications network for Norway’s emergency and preparedness services, owned by the Norwegian Directorate for Civil Protection (DSB). The primary users are the police, fire service, and healthcare service, but the network is also used by more than a thousand other preparedness organizations, with a total of around 150,000 users. Motorola Solutions Norway AS is DSB’s contractor for the rollout, operation, and servicing of Nødnett. Motorola Solutions is responsible for the day‑to‑day operation and maintenance of the national Nødnett radio network, including base stations, transmission links, and the core network. Motorola Solutions also delivers lifecycle management and technology upgrades within the contract and monitors Nødnett around the clock from our Network Operations Center (NOC) in Oslo.

Place of work

The place of work is Motorola Solutions Norway AS’s office premises at Kabelgata34 at Økern in Oslo. Physical attendance is required during on‑call duty and mobilization in the event of serious incidents.

Job Description

Do you want to help protect Nødnett against cyber threats and ensure that Norwegian emergency and preparedness actors can communicate safely, even when Nødnett is under attack? We are expanding our operational security team and are seeking a security analyst who will help strengthen our capabilities for security monitoring, analysis, and incident response. Motorola Solutions Norway AS is seeking a security analyst for our cybersecurity team for Nødnett. As a security analyst, you will be responsible for maintaining and ensuring quality in our day‑to‑day detection development, security monitoring, analysis, and incident handling in collaboration with our external SOC provider. Your main task will be to ensure that we detect and understand unwanted activity in Nødnett as early as possible so that we have the opportunity to handle possible potential incidents well before their full damage potential has been realized. This is a role for someone who wants to work proactively and operationally. You must be able to work proactively and independently to investigate deviations, alarms, and vulnerabilities, and work together with the rest of the security team and other relevant operational environments to find satisfactory answers and solutions to deviations and the correct response to incidents.

The primary practical responsibilities that come with the role are:

• Perform the daily security monitoring of Nødnett together with our external SOC.
• Prioritize, verify, and follow up alarms, vulnerabilities, and other relevant deviations and indications of unwanted activity.
• Regularly conduct hypothesis‑driven investigations across relevant data sources.
• Assess vulnerabilities, threats, and risk and contribute to the prioritization of measures during both normal operations and ongoing incidents.
• Ensure appropriate collection, storage, and documentation of observations and technical traces during incidents.
• Document cases, analyses, findings, assessments, and recommendations in a way that supports immediate operational needs, reporting, and subsequent learning and improvement.
• Identify weaknesses in security monitoring, security controls, and work processes and promote and follow up proposals for improvements.
• Ensure strong detection capability through continuous detection development.
• Conduct testing, exercises, and other activities that strengthen the team’s operational capability.
• Adopt and further develop appropriate automation for analysis, data collection, and other repetitive work tasks.

As a security analyst, you will work closely with our security engineers and be part of our CSIRT. As our security analyst, you will be part of our CSIRT. From2027, you will also be part of the security team’s on‑call rotation.

Basic Requirements

The following competence and experience are useful to bring into the role from day one:

• Practical experience with log analysis and data platforms.
• Ability to do structured documentation and case handling.
• Ability to work methodically with uncertain and incomplete information.
• Practical experience with scripting or automation for analysis, data collection, or streamlining repetitive tasks.
• Experience with security monitoring, alarm handling, and operational security analysis.
• Experience from SOC, CSIRT, or equivalent operational security functions.

In addition, it is an advantage if you also bring some of the following:

• Good understanding of networks, network protocols, and attack patterns in network traffic.
• Good understanding of operating systems, security controls, logging, and evidence preservation.
• Experience with modern EDR tools.
• Experience with hunting, detection development, and further development of logging and other data collection.
• Experience with vulnerability management and risk assessment.
• Experience with on‑prem security solutions and work in environments with limited internet access.
• Some experience with memory and disk forensics.
• Experience with testing and exercises.

It is a bonus if you have experimental experience with:

• AI‑assisted development tools and context management with RAG‑type workflows.
• Experimentation with and training of LoRA‑type adapters for large language models.

Qualities and attitudes

You collaborate well with others and are open and inclusive in how tasks are solved. You are able to stay calm, orient yourself, and prioritize well even in demanding situations. You work in a structured and thorough way, and document cases and assessments in a way that works even when you and others are under pressure in stressful situations. You are able to work through unclear situations, and can make trade‑offs and decisions even when the information basis is not perfect. You are analytical and curious, and like to investigate how things actually fit together. You are able to distinguish between observations, assessments, and assumptions, and communicate uncertainty clearly. You take responsibility for continuous learning and turn experience from incidents, threat hunting, and day‑to‑day monitoring into concrete improvements. You handle confidential systems and information with integrity and discretion. You believe societal security is important and want to contribute to securing critical infrastructure. You have respect for those around you and want to contribute to a good working environment.

Formal requirements

Relevant technical education and at least three years of relevant work experience. Candidates with less than five years of relevant experience must provide grades from their education. Alternatively, at least five years of relevant work experience with good references. A written reference from a previous employer must then be provided. Good written and spoken communication skills in both Norwegian and English. This also applies to terminology and language related to IT and cybersecurity. Normally, the fastest travel time from your primary residence to the workplace (for example by taxi) must not exceed one hour in order to meet the requirement for physical response during on‑call duty. In addition, the position requires Norwegian security clearance to the level of HEMMELIG under the Security Act. This is not a requirement set by Motorola Solutions, but by the Norwegian authorities. This means the following for you as an applicant: The authorities’ clearance process may take up to one year. During the period before the clearance is in place, newly hired employees will not be able to participate in the most sensitive parts of the work, especially if a serious security incident should occur. The clearance must be maintained throughout the employment relationship, and loss of clearance will lead to termination of the employment contract, as critical work tasks require clearance. Motorola Solutions has no insight into and cannot influence the clearance process. You can read more about clearance on the Nasjonal Sikkerhetsmyndighet’s website: https://nsm.no/fagomrader/personellsikkerhet/sikkerhetsklarering/ https://nsm.no/fagomrader/personellsikkerhet/sikkerhetsklarering/sporsmal-og-svar-om-klarering/

What we offer

We can offer:

• A job where you contribute to protecting national critical infrastructure.
• Flexible working hours and the possibility of working from home when the tasks allow it.
• An extra week of paid vacation, totaling six weeks per year.
• Two hours per week for exercise or personal development during working hours.
• Freedom of choice in selecting a workstation / laptop.
• On‑call allowance and paid overtime for personnel on on‑call duty.
• Motorola Solutions also has two insurance schemes for employees: A group agreement with favorable pricing on private insurance with Storebrand.
• Health insurance from IF that covers employees.
• There are also a number of other benefits and reimbursement arrangements.
• The position is planned to be included in the on‑call rotation from 2027.

Interviews and tests

The application deadline for the position is Tuesday, 1st December 2026. Applications will be processed on an ongoing basis, and relevant candidates will be invited to interview before the application deadline has passed.

Travel Requirements

10-25%

Relocation Provided: None

Position Type

Experienced

Referral Payment Plan

No Company Motorola Solutions Norway AS

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally‑protected characteristic.

We are proud of our people‑first and community‑focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world.