Security Operations Centre Security Analyst

About the job

Company Overview

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Department Overview

The core mission of the security team is to establish and maintain a strong operational cybersecurity readiness for Nødnett. The security team’s main task is to protect Nødnett by detecting and handling threats and vulnerabilities as early as possible.
We do this through specialized expertise, clear procedures, disciplined documentation, repeatable working methods, and regular training and exercises, and by working closely with selected operational environments both within and outside Nødnett, including our external SOC provider.
The security team is an integrated part of the operational environment that runs Nødnett.
Nødnett is Norway’s nationwide digital communications network for Norway’s emergency and preparedness services, owned by the Norwegian Directorate for Civil Protection (DSB). The primary users are the police, fire service, and healthcare service, but the network is also used by more than a thousand other preparedness organizations, with a total of around 150,000 users.
Motorola Solutions Norway AS is DSB’s contractor for the rollout, operation, and servicing of Nødnett. Motorola Solutions is responsible for the day-to-day operation and maintenance of the national Nødnett radio network, including base stations, transmission links, and the core network. Motorola Solutions also delivers lifecycle management and technology upgrades within the contract and monitors Nødnett around the clock from our Network Operations Center (NOC) in Oslo.
Place of work
The place of work is Motorola Solutions Norway AS’s office premises at Kabelgata 34 at Økern in Oslo. Physical attendance is required during on-call duty and mobilization in the event of serious incidents.

Job Description

Do you want to help protect Nødnett against cyber threats and ensure that Norwegian emergency and preparedness actors can communicate safely, even when Nødnett is under attack? We are expanding our operational security team and are seeking a security analyst who will help strengthen our capabilities for security monitoring, analysis, and incident response.

Motorola Solutions Norway AS is seeking a security analyst for our cybersecurity team for Nødnett. As a security analyst, you will be responsible for maintaining and ensuring quality in our day-to-day detection development, security monitoring, analysis, and incident handling in collaboration with our external SOC provider.

Your main task will be to ensure that we detect and understand unwanted activity in Nødnett as early as possible so that we have the opportunity to handle possible potential incidents well before their full damage potential has been realized.

This is a role for someone who wants to work proactively and operationally. You must be able to work proactively and independently to investigate deviations, alarms, and vulnerabilities, and work together with the rest of the security team and other relevant operational environments to find satisfactory answers and solutions to deviations and the correct response to incidents.

The primary practical responsibilities that come with the role are:

• Perform the daily security monitoring of Nødnett together with our external SOC.
• Prioritize, verify, and follow up alarms, vulnerabilities, and other relevant deviations and indications of unwanted activity.
• Regularly conduct hypothesis-driven investigations across relevant data sources.
• Assess vulnerabilities, threats, and risk and contribute to the prioritization of measures during both normal operations and ongoing incidents.
• Ensure appropriate collection, storage, and documentation of observations and technical traces during incidents.
• Document cases, analyses, findings, assessments, and recommendations in a way that supports immediate operational needs, reporting, and subsequent learning and improvement.
• Identify weaknesses in security monitoring, security controls, and work processes and promote and follow up proposals for improvements.
• Ensure strong detection capability through continuous detection development.
• Conduct testing, exercises, and other activities that strengthen the team’s operational capability.
• Adopt and further develop appropriate automation for analysis, data collection, and other repetitive work tasks.

As a security analyst, you will work closely with our security engineers and be part of our CSIRT. As our security analyst, you will be part of our CSIRT. From 2027, you will also be part of the security team’s on-call rotation.

Basic Requirements

Competence and experience

The following competence and experience are useful to bring into the role from day one:

• Practical experience with log analysis and data platforms.
• Ability to do structured documentation and case handling.
• Ability to work methodically with uncertain and incomplete information.
• Practical experience with scripting or automation for analysis, data collection, or streamlining repetitive tasks.
• Experience with security monitoring, alarm handling, and operational security analysis.
• Experience from SOC, CSIRT, or equivalent operational security functions.

In addition, it is an advantage if you also bring some of the following:

• Good understanding of networks, network protocols, and attack patterns in network traffic.
• Good understanding of operating systems, security controls, logging, and evidence preservation.
• Experience with modern EDR tools.
• Experience with hunting, detection development, and further development of logging and other data collection.
• Experience with vulnerability management and risk assessment.
• Experience with on-prem security solutions and work in environments with limited internet access.
• Some experience with memory and disk forensics.
• Experience with testing and exercises.

It is a bonus if you have experimental experience with:

• AI-assisted development tools and context management with RAG-type workflows.
• Experimentation with and training of LoRA-type adapters for large language models.

Qualities and attitudes

To succeed in the role, we believe you will recognize yourself in much of this:

• You collaborate well with others and are open and inclusive in how tasks are solved.
• You are able to stay calm, orient yourself, and prioritize well even in demanding situations.
• You work in a structured and thorough way, and document cases and assessments in a way that works even when you and others are under pressure in stressful situations.
• You are able to work through unclear situations, and can make trade-offs and decisions even when the information basis is not perfect.
• You are analytical and curious, and like to investigate how things actually fit together.
• You are able to distinguish between observations, assessments, and assumptions, and communicate uncertainty clearly.
• You take responsibility for continuous learning and turn experience from incidents, threat hunting, and day-to-day monitoring into concrete improvements.
• You handle confidential systems and information with integrity and discretion.
• You believe societal security is important and want to contribute to securing critical infrastructure.
• You have respect for those around you and want to contribute to a good working environment.

Formal requirements

The following minimum requirements related to education, experience, and language must be met in order to qualify for the position: