Researcher / Analyst (Cyber and Defence Risk Management)

Nortal's Applied Defence R&D serves as an innovation engine, transforming complex defence challenges into validated, deployable solutions. By combining cyber resilience, AI, data science, embedded security, and digital engineering, we deliver mission-ready prototypes and architectures. Partnering with governments, armed forces, industry, and academia, we create sovereign IP, dual-use technologies, and NATO/EU-aligned innovations that reduce risk and accelerate capability delivery.

We are looking for a Researcher/Analyst to support our defence and cybersecurity R&D projects through structured risk analysis, threat assessment, and evidence-based research. You will turn technical and operational risk into clear findings and recommendations for engineers, project teams, and defence stakeholders.

• Conduct cybersecurity, technology, operational, and defence-related risk assessments within R&D projects
• Analyse threats, vulnerabilities, and risk scenarios across technical systems
• Develop and maintain risk models, criteria, and structured risk registers
• Support threat modelling, security requirements engineering, and capability-gap analysis
• Research defence, cyber security, and regulatory topics relevant to project objectives
• Author and co-author research reports, risk assessments, and formal R&D deliverables
• Support workshops, interviews, and stakeholder reviews
• Cybersecurity and operational risk assessment methodologies
• Threat modelling, scenario analysis, and capability-gap assessment
• Qualitative and quantitative research and comparative analysis
• Requirements engineering and structured documentation
• Risk assessments, threat analyses, and mitigation recommendations
• Research reports and feasibility assessments
• Requirements and decision-support materials
• Contributions to R&D deliverables, proposals, and stakeholder briefings

• Background in cyber security, defence, risk management, security studies, or a related analytical field
• Practical experience conducting risk assessments or analysing cyber, defence, or technology risks
• Understanding of cyber threats, vulnerabilities, and risk-treatment concepts
• Ability to connect technical findings with operational and organisational consequences
• Degree or equivalent experience in cyber security, security studies, risk management, or a related field
• Willingness to complete a government security clearance process

Nice to have

• Experience with defence organisations or critical infrastructure is an advantage
• Familiarity with recognised risk or security frameworks is an advantage

• We care about your growth & development. At Nortal, we support constant improvement and knowledge sharing
• We prioritise your health & well-being by providing a flexible package for health insurance and sports initiatives
• We support your work-life balance and provide flexible working hours
• It's your choice whether you want to work from the office or remotely within Estonia