Job summary
An experienced cybersecurity professional is sought for a senior role focused on penetration testing and security assessments across both IT and Operational Technology (OT) environments. The position involves working with critical infrastructure sectors including energy, maritime, and industrial control systems. The role requires significant international and domestic travel, on-site assessments, and collaboration with global cybersecurity experts. The employer supports career growth through continuous learning and certifications.
Location and work setup
- Location
- Trondheim
- Work setup
- Hybrid
Responsibilities
Conduct penetration tests and vulnerability assessments in IT and OT environments, including live operations. Perform security evaluations of industrial control systems and networks. Execute red team and adversary simulation exercises. Work on-site at diverse customer locations internationally and domestically. Produce detailed technical and executive security reports. Collaborate with multidisciplinary global cybersecurity teams. Engage with safety-critical infrastructure such as PLCs, SCADA systems, and maritime control systems.
Qualifications
Bachelor’s degree or higher in cybersecurity, computer science, telecom, automation, or related fields, or equivalent experience. Proven senior-level expertise in penetration testing and vulnerability assessments. Willingness and ability to travel both domestically and internationally, including industrial and maritime sites. Familiarity with OT and ICS security concepts. Strong understanding of network architectures, firewalls, routing, and switching. Excellent communication skills for reporting and stakeholder interaction. Customer-oriented with strong relationship-building skills. Collaborative, ethical, and solutions-focused mindset. Advantageous qualifications include experience with industrial automation systems (PLCs, HMIs, SCADA), OT penetration testing, Active Directory security, knowledge of IEC 62443 standard, relevant cybersecurity certifications (e.g., GICSP, OSCP), and experience in critical infrastructure sectors.