SOC Analyst

Hydro is looking for a SOC Analyst The SOC Analyst is a junior to mid-level position within the security operations center and provides cyber security monitoring. The role is responsible for daily monitoring and protection of industrial control system environments with the goal of keeping the operational environment safe, secure, and resilient against current and emerging cyber threats – both incidental and targeted engineering systems malware or human adversaries.

The role is responsible for monitoring/implementing cyber security solutions in support of manufacturing operations, detection and analysis of potentially compromised systems, root cause analysis, and supporting remediation efforts. The SOC analyst should have a good technical knowledge of IT/OT cyber security, experience with SIEM solution, hands-on experience with Incident Response process, and is aware of the latest threats within the industry.

The role leverages technical knowledge in multiple disciplines within Infrastructure and Information Security such as assessing threats, hunting, and Incident Response, in addition to unique OT protocols and devices that must be understood to accurately recognize and analyze malicious activity. The ICS SOC Analyst will closely cooperate with various teams under each business area (BAs), operational staff on manufacturing/production sites, and external security vendors. Under crisis or time-critical incident response, the role answers to the SOC lead Analyst who in turn reports to the Incident Coordinator.

1. Collaborate with various Engineering teams to implement new OT Cyber Security technologies
2. Analyze threat intelligence and spread findings to relevant groups
3. Participate in OT security incident response through all phases
4. Act as Subject Matter Expert (SME) on OT cyber security related issues
5. Recommend necessary corrective and preventive actions to reduce the risk
6. Conduct hunt for Indicators of Compromise (IOC) and APT Tactics, Techniques, and Procedures (TTP)
7. Provide clear and repeatable hunt tactics and techniques to external vendors if applicable
8. Perform operational excellence through continuous improvement and automation
9. Serve as the escalation point for security issues related to OT Cyber Security
10. Assist in the development and knowledge transfer to SOC team members, as well as other enterprise groups.

1. Bachelor or master's degree in information technology or related
2. Relevant work experience within Cyber Security
3. Familiar with Industrial Control Systems (ICS) and Operation Technology (OT)
4. Good technical insight and understanding
5. Fluency in Norwegian and English

1. Good at planning and has high execution ability
2. Self-driven and able to prioritize work tasks effectively
3. Pragmatic and solution-oriented
4. Analytical and accurate in your work

Additional information: The position reports to the ICS SOC manager. Workplace is in Oslo. As part of our recruitment process, we use Semac for background check.