Senior Intelligence Analyst

Senior Intelligence Analyst

In your role as our senior intelligence analyst you will write tactical, operational, and strategic intelligence reports related to cyber threats against the maritime sector. You will participate in the development of our intelligence requirements and collection plan. The intelligence focus will be on threat actors targeting IT and OT systems onboard vessels, or in the maritime sector in general. You will analyze cyber incidents, share technical indicators with our members and partners, and develop advanced detection rules for our monitoring and detection systems. In the event of cyber incidents, you will participate in response and crisis management. 

You have a strong interest in cyber security and know how cyber threat actors are operating and understand how you can perform threat hunting using information from open or closed sources, as well as data from SIEM or network sensors. You enjoy writing your own tools to process data and automate analysis. 

Your office will be in the NORMA CYBER Resilience Center in Oslo, with flexibility regarding the use of home office or remote location. 

Desired background: 

  • Bachelor's or Master's degree in computer science, computer engineering, digital forensics, cyber security or telecommunications, security studies. 
  • Minimum 3 years hands-on experience as cyber threat intelligence analyst 
  • Strong verbal presentation and writing skills, in both English and Norwegian
  • Excellent analytical skills and strong ability to think creatively when approaching issues. 
  • Experience with cyber security frameworks like the Diamond Model, the Cyber Kill Chain and MITRE ATT&CK. 
  • Experience with tactical information sharing, preferably using the MISP platform 
  • Experience with enrichment tools, and high-level programming in Python, Go or similar, as there will often be a need to automate and improve the analysis process. 

Applicants should hold or qualify for a security clearance up to minimum HEMMELIG. 

Om arbeidsgiveren

The Norwegian Maritime Cyber Resilience Centre - NORMA Cyber, will start operations on 1. January 2021. NORMA Cyber will deliver centralised cyber security services to Norwegian shipowners and other entities within the Norwegian maritime sector. The centre is a joint effort between Den Norske Krigsforsikring for Skib (DNK) and the Norwegian Shipowners’ Association (NSA), and will operate at a non-profit basis. NORMA Cyber aims to be the leading hub for operational cyber security efforts within the Norwegian maritime sector and is expected to expand. The centre will deliver a wide variety of cyber security services for its members within intelligence, security operations and crisis response. This new centre will collaborate closely with the already existing Intelligence & Operations Centre (IOC) at DNK and the Contingency Preparedness department at NSA.

The DNK and NSA member base consists of 420 Norwegian ship owners and operators –controlling 3400 vessels, drilling rigs and similar movable units.

The NORMA Cyber Intelligence team is responsible for providing strategic, operational and tactical cyber threat intelligence in order to support our members operations and planning. We collect information from open and closed sources, related to threats and vulnerabilities that may impact IT and OT systems onboard vessels.

In the event of cyber incidents related to our members we provide incident response and crisis management services.

All positions will play a key role in building the NORMA Cyber Resilience Centre. NORMA Cyber have the ambition to use the latest technology to discover and mitigate cyber threats towards the maritime industry. Machine learning and cloud technology will be used to augment intelligence analytics.

We are seeking candidates that are social and self-driven, have a high degree of integrity and are creative but systematic.

NORMA Cyber offers a competitive compensation package.

0158 Oslo
Forsvar og militær,
Maritim og offshore
IT utvikling / IT-sikkerhet,



Spørsmål om stillingen

Arne Asplem
922 61 990
Følg firma
15 følger dette firmaet

0158 Oslo

Stort kart Hybridkart Flyfoto


FINN-kode 196542615
Sist endret 11. nov. 2020 00:04

Rapporter annonse