What does the job involve?

• Equinor has a global presence with offices in over 20 countries, 40.000 user accounts, and a complex threat picture that is challenging to work with and defend against.

• The Cyber Defense Center (CDC) in Equinor is responsible for detecting and responding to cyber threats as well as delivering Cyber Threat Intelligence and Cyber Awareness services to end users and leadership.

• The majority of our team is located in Stavanger, but we also have members working out of Oslo and Bergen.

• The Cyber Security Incident Response Team consists of Incident Managers and Technical Analysts with end-to-end responsibility for cyber incident response across Equinor where each member has a lot of autonomy and flexibility in their work.

• We are passionate about competence development and recognize the need for continuous learning to stay up to date and sharpen our skillset.

What will my tasks be?

Within this position, your key tasks will be to:

Work in the Cyber Defense Center in Equinor, which is responsible for detecting and responding to cyber threats to on-prem systems, cloud and IACS (Industrial Automation & Control Systems).

Take the role as a Cyber Incident Responder with an end-to-end responsibility for cyber incident response across Equinor.

Drive and shape the evolution of our technical response, analysis, and forensic capabilities to investigate and mitigate cyber security incidents.

Engage and develop productive working relationships with internal and external stakeholders.

Research attacker tactics, techniques, and procedures (“TTPs”) and translate your knowledge into response plans, playbooks, and procedures.

Collaborate with Equinor’s Emergency response organisation and other stakeholders when handling incidents and developing exercise/training plans.

Here's what we expect from you:

At Equinor, there are some overall qualities we regard as essential. We want you to identify with the values that guide our decisions and help us succeed and grow: open, collaborative, courageous and caring. We expect you to make safety your priority and to contribute to our zero-harm culture. And for this specific position, we are also looking for:

• Bachelor's or Master's degree in computer science or related fields (working experience may compensate for formal education).

• Experience working within a Computer Security Incident Response Team (CSIRT) or Cyber Security Operations Center (CSOC) desirable.

• Clear and concise communication both verbally and in writing.

• Structured, curious, analytical and knowledge-seeking mindset.

• If you have relevant experience within Cyber Threat Intelligence or emergency response, we also encourage you to apply.

What can we offer you?

We want you to have a rewarding and fulfilling work life. That’s why we offer

Not just a job - a career

In Equinor, your development begins on day one. You will build your competence through a wide range of learning activities while being empowered to build your career across multiple disciplines and geographies. Our internal job market allows a wide range of opportunities for development and growth within your own field, or even in other areas you find interesting and relevant.

Attractive rewards

We give you a comprehensive benefits package with a competitive salary, global parental leave, bonus scheme and pension plan.

Wellness and work-life balance

We care about and prioritise our employees’ well-being. We know that for you to be the best version of yourself in the workplace, being able to collect your children, attend a class or simply enjoy social time can be invaluable. That’s why we encourage you to make use of our flexible work arrangements wherever possible.

An inclusive culture

We believe embracing our differences makes us stronger. For us, true inclusion means being able to bring your whole self to work, and for you and everyone else to feel accepted and valued.

Equal opportunities for everyone

Equinor is an equal-opportunity employer. We make all employment decisions, which include hiring, promotion, transfer, demotion, termination, and training, without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, parental status, veteran status, or any other protected status.

As part of this commitment, reasonable adjustments will be made during the recruitment process for candidates with disabilities or long-term health conditions. If you have any specific requirements, please clarify this in your application and our team will be in contact to see how we can support your needs.

Important notes about the application process

We expect you to openly offer all relevant information about yourself during the recruitment process. Background checks are performed on all final candidates, and all permanent and temporary hires will be screened using relevant sanctions lists to ensure compliance with sanctions laws. When applying for a job in Norway you will be asked for information on affiliation to high-risk countries for a security assessment.