Join NBIM's Detection and Response team

Norges Bank Investment Management (NBIM) mission is to safeguard and build financial wealth for current and future generations in Norway. As the largest single owner of stocks in the world, managing approximately 20 trillion Norwegian kroner. We are on a mission with a great purpose – which you can be a part of.

The Opportunity

Join NBIM's Cyber Security Centre as we further develop our detection and response capabilities. This role bridges hands-on security operations with advanced detection engineering. We think it is perfect for experienced SOC analysts and incident responders ready to evolve beyond traditional alert triage. You'll collaborate with a diverse team to handle security events from initial analysis through resolution. Major cybersecurity incidents are rare, giving the team opportunity to innovate and improve our capabilities rather than constantly firefighting.

Daily Operations:

• Triage and investigate security alerts with context-aware prioritization

• Coordinate or lead incident response efforts when threats materialize

• Perform deep-dive analysis on suspicious activities

• Strengthen operational readiness through runbooks, tabletop exercises, red teaming, and CTFs/Breach and Attack Simulation (BAS)
  

Building Better Defences:

• Transform threat intelligence into practical detections using KQL and custom analytics

• Design AI-enhanced workflows that enrich context and accelerate response

• Measure and improve detection effectiveness through meaningful metrics

• Develop and refine LLM-based analysis assistants that support incident investigation

• Help ensure responsible and secure AI adoption across our operations

Our Detection & Response Stack:

• Microsoft Sentinel for SIEM/SOAR and Microsoft Defender suite

• AWS-native security services and Wiz/Wiz sensor for cloud security posture and workloads

• AI/ML platforms for security analytics and triage

Your Experience & Skills:

• At least 3 years in security operations, with hands-on alert triage and incident response experience

• Detection mindset - you understand detection logic, false positive tuning, and coverage optimization

• Cloud security expertise, EntraID and AWS

• Automation skills - Python, PowerShell, or KQL
  

We do not expect you to yet be a master of all these domains, but you must have a willingness to learn and explore.

We're seeking someone who:

• Thrives in both detailed analysis and big-picture thinking

• Remains calm and effective during incidents while learning from each experience

• Finds satisfaction in automating repetitive work to focus on interesting problems

• Values building lasting solutions over quick fixes

• Brings their unique perspective to strengthen our collective capabilities

• Enjoys sharing knowledge and learning from others and is a good cultural fit with our cohesive team

• You should be eligible for Norwegian security clearance (HEMMELIG).

Why work with us at NBIM?

Inclusive Culture
Join a flat, collaborative organization with 37 nationalities where diverse perspectives are valued. Excellence, innovation, integrity, and team spirit guide how we work together in English, our common language. We offer opportunities for international collaboration and conference travel.

Our Values
We're driven by a culture of continuous learning. Learning is embedded in everything we do. We embrace growth opportunities and strongly encourage lifelong learning. We emphasize digital proficiency, with a particular focus on AI. Our people are expected to be comfortable adopting and leveraging AI tools. We prioritize wellbeing, supporting both ourselves and our colleagues. And lastly, but not least, we believe in creating an environment where we have fun together!
We aim to increase the share of women to exceed or match the industry average across all functions. Norges Bank Investment Management is committed to ensuring equal opportunities for all employees.

Perks and benefits
We offer everyone at the fund competitive pay, an engaging work environment, and an opportunity for personal growth and development.
In addition, you can look forward to:

• Work with purpose - Your efforts directly protect Norway's financial future and contribute to global financial stability. Through responsible investment and active ownership, we work to safeguard and build financial wealth for future generations.

• Learning budget – Being the best requires continuous improvement. We support your growth through premier training (SANS, Black Hat, DEF CON), certifications, and conferences. Team members regularly share learnings and present research.

• Keep it healthy – In addition to in-house gym, basketball court, and squash court, we have multiple sports clubs and offer discounts on gym memberships and stores.

• Out of office – When you’re taking time off, we provide access to holiday facilities in Norway, for you and your family.

• Moving places – As part of Norges Bank, we offer home and consumer loans to all our employees to make the transition easier.

• Staying safe – We take the safety of our employees extremely serious. That’s why everyone is offered a comprehensive life and disability insurance plan.
  

Are you interested?

Ready to take security operations to the next level while protecting critical assets that matter? We'd love to hear from you. You can apply through the link in this ad, that will take you to the application form in our recruitment system. Applications will be reviewed consecutively throughout the application period.

The role may be subject to compensated on-call rotation. Do you have questions about the role or the team? Please contact Geir Strøm.

Please note:
Employment with Norges Bank is conditional on approved security check in accordance with Norges Bank’s rules, which may include criminal background and credit checks, and approved verification of employment history and academic records.

Application close at 23:59 CET

We manage the Government Pension Fund Global, one of the world’s largest funds, with assets worth about 20,000 billion kroner, or 2 trillion dollars. The fund is invested in international equity and fixed-income markets as well unlisted real estate and renewable energy infrastructure. We are close to 700 people from 38 countries based in Oslo, London, New York, and Singapore. Our mission is to safeguard and build financial wealth for future generations of Norway. Please see our website for more information www.nbim.no.

Norges Bank Investment Management is subject to the Freedom of Information Act, and the list of applicants for the position is subject to public disclosure. An applicant requesting to have his or her name or other information exempt from public disclosure must provide grounds for this request. Please note that information about an applicant may be disclosed to the public even if the applicant has requested that such information be exempt.