Security Operations Centre Security Analyst

Description

Company Overview

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Department Overview

The core mission of the security team is to establish and maintain a strong operational cybersecurity readiness for Nødnett. The security team’s main task is to protect Nødnett by detecting and handling threats and vulnerabilities as early as possible.

We do this through specialized expertise, clear procedures, disciplined documentation, repeatable working methods, and regular training and exercises, and by working closely with selected operational environments both within and outside Nødnett, including our external SOC provider.

The security team is an integrated part of the operational environment that runs Nødnett.

Nødnett is Norway’s nationwide digital communications network for Norway’s emergency and preparedness services, owned by the Norwegian Directorate for Civil Protection (DSB). The primary users are the police, fire service, and healthcare service, but the network is also used by more than a thousand other preparedness organizations, with a total of around 150,000 users.

Motorola Solutions Norway AS is DSB’s contractor for the rollout, operation, and servicing of Nødnett. Motorola Solutions is responsible for the day-to-day operation and maintenance of the national Nødnett radio network, including base stations, transmission links, and the core network. Motorola Solutions also delivers lifecycle management and technology upgrades within the contract and monitors Nødnett around the clock from our Network Operations Center (NOC) in Oslo.

Place of work

The place of work is Motorola Solutions Norway AS’s office premises at Kabelgata 34 at Økern in Oslo. Physical attendance is required during on-call duty and mobilization in the event of serious incidents.

Do you want to help protect Nødnett against cyber threats and ensure that Norwegian emergency and preparedness actors can communicate safely, even when Nødnett is under attack? We are expanding our operational security team and are seeking a security analyst who will help strengthen our capabilities for security monitoring, analysis, and incident response.

Motorola Solutions Norway AS is seeking a security analyst for our cybersecurity team for Nødnett. As a security analyst, you will be responsible for maintaining and ensuring quality in our day-to-day detection development, security monitoring, analysis, and incident handling in collaboration with our external SOC provider.

Your main task will be to ensure that we detect and understand unwanted activity in Nødnett as early as possible so that we have the opportunity to handle possible potential incidents well before their full damage potential has been realized.

This is a role for someone who wants to work proactively and operationally. You must be able to work proactively and independently to investigate deviations, alarms, and vulnerabilities, and work together with the rest of the security team and other relevant operational environments to find satisfactory answers and solutions to deviations and the correct response to incidents.

The primary practical responsibilities that come with the role are:

Perform the daily security monitoring of Nødnett together with our external SOC.

Prioritize, verify, and follow up alarms, vulnerabilities, and other relevant deviations and indications of unwanted activity.

Regularly conduct hypothesis-driven investigations across relevant data sources.

Assess vulnerabilities, threats, and risk and contribute to the prioritization of measures during both normal operations and ongoing incidents.

Ensure appropriate collection, storage, and documentation of observations and technical traces during incidents.

Document cases, analyses, findings, assessments, and recommendations in a way that supports immediate operational needs, reporting, and subsequent learning and improvement.

Identify weaknesses in security monitoring, security controls, and work processes and promote and follow up proposals for improvements.

Ensure strong detection capability through continuous detection development.

Conduct testing, exercises, and other activities that strengthen the team’s operational capability.

Adopt and further develop appropriate automation for analysis, data collection, and other repetitive work tasks.

As a security analyst, you will work closely with our security engineers and be part of our CSIRT. As our security analyst, you will be part of our CSIRT. From 2027, you will also be part of the security team’s on-call rotation.

Basic Requirements

Competence and experience

The following competence and experience are useful to bring into the role from day one:

Practical experience with log analysis and data platforms.

Ability to do structured documentation and case handling.

Ability to work methodically with uncertain and incomplete information.

Practical experience with scripting or automation for analysis, data collection, or streamlining repetitive tasks.

Experience with security monitoring, alarm handling, and operational security analysis.

Experience from SOC, CSIRT, or equivalent operational security functions.

In addition, it is an advantage if you also bring some of the following:

Good understanding of networks, network protocols, and attack patterns in network traffic.

Good understanding of operating systems, security controls, logging, and evidence preservation.

Experience with modern EDR tools.

Experience with hunting, detection development, and further development of logging and other data collection.

Experience with vulnerability management and risk assessment.

Experience with on-prem security solutions and work in environments with limited internet access.

Some experience with memory and disk forensics.

Experience with testing and exercises.

It is a bonus if you have experimental experience with:

AI-assisted development tools and context management with RAG-type workflows.

Experimentation with and training of LoRA-type adapters for large language models.

Qualities and attitudes

To succeed in the role, we believe you will recognize yourself in much of this:

You collaborate well with others and are open and inclusive in how tasks are solved.

You are able to stay calm, orient yourself, and prioritize well even in demanding situations.

You work in a structured and thorough way, and document cases and assessments in a way that works even when you and others are under pressure in stressful situations.

You are able to work through unclear situations, and can make trade-offs and decisions even when the information basis is not perfect.

You are analytical and curious, and like to investigate how things actually fit together.

You are able to distinguish between observations, assessments, and assumptions, and communicate uncertainty clearly.

You take responsibility for continuous learning and turn experience from incidents, threat hunting, and day-to-day monitoring into concrete improvements.

You handle confidential systems and information with integrity and discretion.

You believe societal security is important and want to contribute to securing critical infrastructure.

You have respect for those around you and want to contribute to a good working environment.

Formal requirements

The following minimum requirements related to education, experience, and language must be met in order to qualify for the position:

Relevant technical education and at least three years of relevant work experience. Candidates with less than five years of relevant experience must provide grades from their education.

Alternatively, at least five years of relevant work experience with good references. A written reference from a previous employer must then be provided.

Good written and spoken communication skills in both Norwegian and English. This also applies to terminology and language related to IT and cybersecurity.

Normally, the fastest travel time from your primary residence to the workplace (for example by taxi) must not exceed one hour in order to meet the requirement for physical response during on-call duty.

In addition, the position requires Norwegian security clearance to the level of HEMMELIG under the Security Act. This is not a requirement set by Motorola Solutions, but by the Norwegian authorities. This means the following for you as an applicant:

The authorities’ clearance process may take up to one year.

During the period before the clearance is in place, newly hired employees will not be able to participate in the most sensitive parts of the work, especially if a serious security incident should occur.

The clearance must be maintained throughout the employment relationship, and loss of clearance will lead to termination of the employment contract, as critical work tasks require clearance.

Motorola Solutions has no insight into and cannot influence the clearance process.

You can read more about clearance on the Nasjonal Sikkerhetsmyndighet’s website:

Benefits

• You will become part of a small team with a high degree of trust, in a service delivery where quality, operational discipline, and good collaboration are essential. We want to offer a framework that supports sustainable delivery over time, with room for development and learning and a working day that is predictable when it can be, while also being reactive when the situation requires it.
• We can offer:
• A job where you contribute to protecting national critical infrastructure.
• Flexible working hours and the possibility of working from home when the tasks allow it.
• An extra week of paid vacation, totaling six weeks per year.
• Two hours per week for exercise or personal development during working hours.
• Freedom of choice in selecting a workstation / laptop.
• On-call allowance and paid overtime for personnel on on-call duty.
• Motorola Solutions also has two insurance schemes for employees:
• A group agreement with favorable pricing on private insurance with Storebrand.
• Health insurance from IF that covers employees.
• There are also a number of other benefits and reimbursement arrangements.
• The position is planned to be included in the on-call rotation from 2027.
• Interviews and tests
• The application deadline for the position is Tuesday, 1st December 2026. Applications will be processed on an ongoing basis, and relevant candidates will be invited to interview before the application deadline has passed.
• Any questions about the position or the process can be sent by email to NorwayRecruitment@motorolasolutions.com . Technical questions can also be directed by phone to Frode Hommedal at 952 60 294 and personnel-related questions to manager Jan Harald Andersen at 414 30 600.
• Travel Requirements
• 10-25%
• Relocation Provided
• None
• Position Type
• Experienced
• Referral Payment Plan
• No
• Company
• Motorola Solutions Norway AS