Cloud Security Engineer

Apotea

Tech Innovation at Apotea Apotea is Sweden’s largest online pharmacy, committed to making healthcare products accessible and efficient for everyone. Our Tech department aims to redefine how AI and automation drive modern businesses — not by forcing AI into traditional workflows, but by creating AI-driven systems that give humans control, insight, and the ability to apply their expertise where it matters most. The Core Technology team builds the architectural foundation supporting e-commerce, logistics, data, AI/ML, and customer experience. We ensure all development aligns with our long-term vision and contributes to Apotea’s growth. We are now looking for a Lead Security Engineer to take full ownership of Apotea’s security strategy, ensure compliance, and enable teams to build and innovate securely at scale. The Role As Lead Security Engineer, you will define, implement, and evolve security practices across AWS (serverless-first), e-commerce, logistics, and data platforms. The role combines strategic leadership with hands-on engineering — you will implement security yourself while empowering others to do so. You will act as the first-line technical security lead, defining guardrails, monitoring risks, and leading incident response. You will develop secure practices for coding with AI assistants, ensuring generated code meets security standards, avoids data leakage, and aligns with regulations. You will also communicate complex security concepts clearly across the organization. Location: Sveavägen 168, Stockholm, Sweden (On-site) Key Responsibilities Security Leadership * Own and evolve Apotea’s security strategy across cloud, applications, and infrastructure. * Translate business and regulatory requirements into sustainable security practices. * Define guardrails, best practices, and reference implementations for teams. Hands-On Security Engineering * Design and implement secure AWS serverless and data-driven systems. * Lead IAM practices, enforcing least-privilege and zero-trust. * Oversee vulnerability management, penetration testing, and patching. * Ensure secure DevSecOps pipelines and IaC security. Monitoring & Incident Response * Build and operate monitoring, detection, and alerting systems (SIEM, EDR, GuardDuty, Security Hub). * Lead incident response: investigate, contain, and recover from security events. * Maintain and test playbooks for emerging threats. Governance & Compliance * Ensure GDPR, healthcare regulations, and industry standards compliance. * Embed security and privacy by design across development. * Partner with legal, compliance, and business units for regulatory readiness. * Provide training and frameworks for safe AI usage without compromising security. Collaboration & Culture * Work closely with engineers, architects, and product teams to integrate security early. * Mentor engineers in secure coding and infrastructure practices. * Advocate for a strong security culture. Qualifications * Extensive experience as a security engineer and organization’s main security expert. * Proven expertise in securing AWS (IAM, networking, serverless, encryption, monitoring). * Strong background in designing secure, scalable, cloud-native systems. * Hands-on experience with SIEM, EDR, vulnerability scanners, secrets management. * Deep knowledge in DevSecOps and IaC (CDK, Terraform, CloudFormation). * Programming/scripting skills: Go, TypeScript, .NET, Python, or similar. Nice to Have: experience in regulated industries, compliance frameworks (ISO 27001, NIST, PCI-DSS), or red/blue team operations. Why Join Apotea? * Stable company with a meaningful mission: improving healthcare accessibility. * Work on cutting-edge AI, ML, and automation impacting millions of customers. * Modern cloud-native technologies (serverless, AI, event-driven). * Flat, agile organization with minimal bureaucracy. * Career growth through training, mentorship, and conferences. * End-to-end project ownership from concept to deployment. * Culture of experimentation, collaboration, and innovation. About Apotea Apotea.se is Sweden’s largest online pharmacy, with the country’s broadest range of over 32,000 non-prescription items and nearly 19,000 prescription drugs for humans and animals. Recognized as Sweden’s most sustainable e-commerce company (Sustainable Brand Index 2021), we simplify everyday life for our customers with fast deliveries and expert advice. In 2024, Apotea reached a turnover of SEK 6.5 billion and currently employs about 1,000 people across Stockholm, Lidingö, and Morgongåva. Apotea is an inclusive employer that values diversity. We welcome all applicants and strive to create a work environment where people, regardless of background, gender, age, religion, or disability, can thrive and grow. Recruitment Process 1. Apply 2. Interview: Screening 3. Interview: Technical Capabilities 4. Interview: Culture Fit 5. Background Check: As a pharmacy, we always conduct a background check. 6. Offer Presented Application Do not hesitate to send in your application already today. For more information or questions, visit our career page or contact us at jobb@apotea.se. We do not accept applications via email. LinkedIn Instagram Join Us and Make a Difference - We hope you want to be a part of our team! Submit your application today—interviews are conducted on an ongoing basis, and the position may be filled immediately. Start date by agreement. Welcome to Apotea – where technology meets health and creates magic!

Natural Cycles

Natural Cycles° is a leading women’s health company that developed the world’s first birth control app, used by millions globally. We are a fast growing startup, and we promote an international working environment filled with smart and ambitious colleagues based in Stockholm, Geneva, New York, and remotely. Our mission is to pioneer women’s health through research and passion, empowering every woman with the knowledge she needs to take charge of her health. We are looking for a Security & Infrastructure Engineer to build and maintain secure tooling, integrations and infrastructure that helps Natural Cycles move fast while managing risk. The role develops internal tools, performs security reviews and security testing, improves monitoring of employee and AI-agent activity, enables teams to prototype internal tools and AI integrations safely, and turns cybersecurity and regulatory requirements into practical controls. Please note that we are hiring for this role in Sweden. What you will be doing * Develop integrations, such as Slackbots and internal assistants, to improve Infrastructure and Security workflows. * Build and maintain infrastructure that enables safe internal experimentation with POCs, helper apps, AI integrations, and automations. * Improve monitoring and detection of employee and AI-agent activity, including risks such as shadow IT, unsafe integrations, excessive permissions, and data exposure. * Protect company resources in a risk-based way according to their criticality, sensitivity, and regulatory relevance. * Use AI tools, mainly Claude, to rapidly develop code, infrastructure as code, automations, security tooling, and documentation. * Translate cybersecurity requirements, including NIS2 and medical device security expectations, into practical engineering work. * Perform security reviews, simpler penetration tests, threat modelling, and risk assessments for internal applications, integrations, and infrastructure changes. * Work independently and proactively while staying aligned with company priorities and risk appetite. What skills and experience we think you have * Strong hands-on experience with software development, infrastructure and cloud platforms. * Ability to build internal tools, automations, AI integrations, and infrastructure components using modern engineering practices. * Comfortable using AI coding assistants, especially Claude or similar tools, while maintaining quality, security, and review discipline. * Basic understanding of identity and access management, logging, monitoring, secrets management, and secure system design. * Ability to assess technical and business risk, prioritise mitigations, and document decisions clearly. * Ability to work independently in ambiguous situations while seeking alignment when needed. * Nice to have: * Practical cybersecurity experience, including security reviews, risk assessments, threat modelling, vulnerability assessment, or penetration testing. * Familiarity with compliance-driven environments and willingness to work with NIS2, medical device security, and quality-system requirements. * DevOps, platform engineering, or infrastructure as code. What we offer * Flexible work arrangement - you will be part of a team based in and around Stockholm that values effective collaboration and transparent communication, irrespective of work location * Professional development - you will work alongside knowledgeable colleagues in the continuous growth and skill enhancement environment * Modern technology - you will leverage innovative technologies and tools, within an environment that empowers you to contribute ideas and take ownership of your work * Impactful projects - you will contribute to groundbreaking projects that redefine industry standards and create tangible value * Commitment to quality - you will join a dynamic and progressive organization that prioritizes profitable, long-term product development Location We are remote-friendly, but we find great value in being able to connect with our teams in person. Most of the team you will work with is located in Sweden. Sounds interesting? If you want to be part of a successful team, we encourage you to apply for this position as soon as possible. We look forward to hearing from you! How to apply To apply, just upload your CV and answer the questions on the application form. Keep in mind that we can't accept applications through email because of GDPR, and only applications submitted via the career site (and in English) will be considered. At Natural Cycles we value diversity and inclusion because we know that teams with people from different backgrounds and experiences are stronger. We welcome candidates from all walks of life and are committed to creating an inclusive environment for all employees and candidates. Note: We are not looking for consultants or help from recruitment agencies

Storytel

Stories have the power to make the ordinary extraordinary. They help us think bigger, see beyond ourselves, and deepen our connection with others. As one of the world's leading audiobook and e-book streaming platforms, Storytel brings unlimited listening to millions of users across 25 markets. Driven by our purpose, "Leading the future of storytelling, we move the world through stories", Storytel Group inspires and entertains people around the world by blending innovation with tradition. We bring stories to life across various formats for everyone to discover. Anytime. Anywhere. Ready for your next chapter? We're looking for a Senior Platform Engineer to join our Platform Engineering team! About the Team The Platform Engineering team focuses on setting up, operating and redefining observability, infrastructure, CI/CD, runtime, Machine Learning and AI agentic tooling at Storytel. We apply software engineering principles to accelerate software delivery and ensure that application development teams are productive in all aspects of the software delivery lifecycle. We aim to design and build toolchains and workflows covering the operational necessities of the entire lifecycle of an application and to enable that as self-service for our teams. This means providing paved roads that make it easy for our application developers to focus on building a great experience for our users. We support the teams in making the most of our platform's capabilities and in providing best-practices knowledge. Our team's expertise is very diverse, varying from cloud infrastructure, through security, to development tools, ML platform tooling, AI and more. About the Role Take the next step in your career as a Senior Platform Engineer at Storytel! At Storytel, engineers are viewed as leaders within the Individual Contributor roles, aiming to create impact and drive initiatives to bring our audio entertainment service to millions of users. As a senior member of the Platform team, you will design, build and maintain the toolchains and workflows that help our teams manage the full life-cycle of their systems – including tools, libraries for our common languages, templates, automation, and configurations. You'll work across observability, deployment pipelines, quality assurance, availability, the runtime platform. A key focus of this role is our ML platform capabilities. With AI and LLMs becoming a strategic part of how Storytel builds product experiences we need someone who can shape the paved road for ML workloads on Google Cloud and Vertex AI – making it easy for product teams to develop, deploy, and operate ML-powered features safely and reliably. Python is the lingua franca of this space and a key language for the role. You'll also coach and unblock developers in their daily work, help them get the most out of the platform, and lead initiatives that improve developer experience across the organisation. You will work with technologies including Metaflow, Argo Workflows, Argo Events, ArgoCD, Kargo, GitHub, GitHub Actions, Grafana, Prometheus, Kubernetes, Google Cloud Platform (including Vertex AI), Infrastructure as Code (Terraform, Atlantis), Fastly, and more. About You To be successful in this role, we believe that you have: * A platform engineering mindset. You understand that the job is about empowering other engineers to do their absolute best work, and you measure your success by their productivity and happiness. * A software engineer's perspective. You've been in the shoes of an application developer and you understand the friction, the trade-offs, and the long feedback loops engineers deal with every day. * Significant hands-on experience with ML on Google Cloud, and specifically Vertex AI – building, deploying, or operating ML workloads, pipelines, or platform capabilities that other teams build on top of. Strong Python skills in this context are expected. * A deep care for developer experience. You believe that good DX has a direct, positive impact on team morale, delivery speed, and product quality – and you can point to things you've built that prove it. * Strong long-term thinking on architecture. You weigh the maintenance cost of every decision and prefer boring, durable solutions over clever ones that someone else will have to live with. * Pragmatic ambition. You have high standards and a vision for where the platform should go, but you also understand the constraints of working in a small organisation and know how to ship value incrementally. * At least 5 years of professional software engineering experience, with solid hands-on development skills.. * Strong experience with container technologies, Kubernetes, and distributed systems in production. * Strong experience with a major cloud provider – ideally Google Cloud Platform. * Experience working in DevEx-adjacent areas such as deployment pipelines, observability and monitoring, quality assurance, automation, self-service tooling, or runtime platforms. * An ability to communicate fluently in English (written and spoken) and to collaborate effectively across teams – this role does not work in isolation. Bonus points for experience or interest in: * Building internal developer platforms (IDPs), golden paths, and self-service tooling * MLOps tooling and patterns – feature stores, model registries, evaluation pipelines, online/offline serving * Building AI agents – hands-on experience designing, building, or productionising agentic systems (e.g. with frameworks like ADK, LangGraph, or similar), including tool use, orchestration patterns, evaluation, and operating agents reliably in production * LLM application infrastructure – prompt management, evaluation, observability, guardrails * Infrastructure-as-code and configuration management at scale * Working with databases – MySQL, Postgres, etc. * Linux/Unix internals Join a world of stories At Storytel, we're a team of creative story lovers who thrive on collaboration and new ideas. Our workplace is friendly, dynamic, and full of opportunities to experiment and make an impact. We believe in trust, flat hierarchies, and empowering you to grow with us. Does this sound like your next story? Simply fill out the application form and share your CV or LinkedIn profile – no cover letter needed. Answer a few questions, and you're all set.