{"id":2549139,"url":"https://alion.io/job/statkraft-csirt-vulnerability-analyst","title":"CSIRT Vulnerability Analyst","company":{"id":684740,"name":"Statkraft","domain":"statkraft.com","url":"https://alion.io/company/statkraft","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Oslo, Norway"],"countries":["NO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":170000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-10-14T14:04:53Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-16T16:16:59Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Statkraft has been making clean energy possible for over a century. Unrivaled pioneering spirit and a strong commitment towards a more sustainable future. That’s what we offer. Today, we are Europe’s largest renewable energy producer and employ more than 6.000 colleagues around the world. Our vision is clear - to renew the way the world is powered. But there is more work to be done and that is why we need you to help us.\n The Statkraft CSIRT team is part of the Cyber Security department in Statkraft. Our mission is to avoid or minimize business impact from attempted or conducted cyber-attacks against Statkraft’s assets. We identify and assess security risks and coordinate the response to vulnerabilities and security events.\nIn a constantly evolving digital landscape, staying ahead of emerging threats is critical. As our new experienced Vulnerability Analyst, you will play an important operational role in protecting our digital assets, infrastructure, and applications. You will join a highly skilled cybersecurity team where your primary focus will be to identify, analyze, validate, prioritize, and follow up vulnerabilities across our technology environment, ensuring that security weaknesses are understood and addressed before they can be exploited.\nYou will work hands-on with the vulnerability management lifecycle, including vulnerability scanning and assessment, validation of findings, risk-based prioritization, remediation tracking, and reporting. You will analyze technical vulnerabilities and their potential impact, distinguish meaningful security risks from false positives and low-risk findings, and provide clear and actionable remediation guidance to infrastructure, application, cloud, and development teams.\nA key part of your role will be to translate technical vulnerability information into practical risk and remediation priorities. You will work closely with system owners and technical teams to ensure vulnerabilities are addressed within defined Service Level Agreements (SLAs), investigate overdue or recurring vulnerabilities, and contribute to improving vulnerability coverage, data quality, and operational processes.\nYou will also monitor emerging vulnerabilities and threats, including newly disclosed vulnerabilities and vulnerabilities with known or suspected exploitation, and help determine their relevance to our environment. Through continuous analysis, collaboration, and follow-up, you will contribute directly to strengthening our security posture and protecting critical infrastructure across several countries.\nYour responsibilities include:\nPerforming vulnerability assessments across Statkraft’s digital infrastructure, applications, cloud environments, and assets using commercial and open-source tools. \nAnalyzing identified vulnerabilities and combine technical findings, threat intelligence, and business context to assess risk and prioritize remediation. \nInvestigating emerging vulnerabilities and threats, assess their potential relevance to Statkraft, and provide actionable recommendations to system owners and technical teams. \nFollowing up on identified vulnerabilities and working with IT, development, cloud, and system owners to support timely and risk-based remediation. \nExploring and applying AI to improve vulnerability analysis, prioritization, enrichment, and efficiency, while critically assessing the quality and reliability of AI-generated insights. \nContributing to the continuous improvement of vulnerability management processes, tools, automation, dashboards, and technical capabilities. \nSupporting security investigations, threat hunting, and security assessments where vulnerability expertise can help identify exposure and reduce cyber risk. \n We are looking for passionate colleagues who are excited to make an impact and bring a mix of mindset and skills to the team. This includes:\nExperience in cyber security, vulnerability management, security operations, incident response, or related technical security field. \nPractical experience with vulnerability assessment and scanning tools such as Tenable/Nessus, Microsoft Defender Vulnerability Management, or similar platforms. \nGood understanding of vulnerability lifecycles, common attack techniques, operating systems, networks, cloud technologies, and application security. \nKnowledge within the field of AI, especially frontier AI and related consequences for vulnerability management. \nStrong analytical and critical-thinking skills, with the ability to turn technical findings and data into clear risk assessments and recommendations. \nScripting or query skills in Python, PowerShell, KQL, Go, Bash, or similar technologies are an advantage. \nFluency in Norwegian and English, both spoken and written. \nWe believe the following skills and experiences would be beneficial:\nSolid networking and communication skills with the ability to easily connect with new people. \nIndependent personality able to work well both solo and in various teams spanning across countries, cultures and languages. \nFamiliarity with cyber security frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, and/or CIS Controls. \nExperience with Application Security (AppSec), DevSecOps, and SAST/DAST tooling. \n We offer\nUnlimited learning opportunities at various levels of the organization \nThe chance to grow your career alongside a truly global network of experts, leaders, specialists, and graduates from different countries and backgrounds \nThe opportunity to work somewhere with pride, and be able to honestly say “My work is contributing to saving the planet” \nA work culture that puts emphasis on the individual, offering flexible working solutions, and work-life balance principles \nStatkraft offers competitive terms of employment and benefits schemes, and we’re a trusted employer that puts the safety of our people first. We believe that a safe and healthy working environment is a matter of choice, not chance \nStatkraft manages critical infrastructure and services in several countries. The applicant must be eligible for Norwegian security clearance and authorization.\nStatkraft's vision is to renew the way the world is powered. To navigate the complex journey ahead, we need every voice at the table. We therefore work actively to be a diverse and inclusive workplace and welcome all applicants regardless of background, gender, age, sexual orientation, religious belief, ethnicity, nationality or disability.\nApplication deadline: 14th of November\nLocation: The position will require physical presence at the main office in Lilleaker, Oslo, Norway.","description_format":"text","description_chars":6590,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Norwegian","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Norway","iso":"NO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security","Solar Energy","Wind Energy"],"lifecycle":[{"event":"open","at":"2026-10-14T17:32:34Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/statkraft-csirt-vulnerability-analyst","json_url":"https://alion.io/job/statkraft-csirt-vulnerability-analyst.json","meta":{"generated_at":"2026-10-16T18:11:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3108,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684740},"rest":"https://alion.io/mcp/rest/get_company?id=684740"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstatkraft-csirt-vulnerability-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstatkraft-csirt-vulnerability-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstatkraft-csirt-vulnerability-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/statkraft-csirt-vulnerability-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstatkraft-csirt-vulnerability-analyst"}]}