Techster Solutions befinner i dagsläget sig i en spännande tillväxtfas och söker nu fler kollegor, inledningsvis dig med minst 4+

års erfarenhet och som kan stärka teamet.

Du kan förvänta dig en omväxlande miljö, dagarna kan se väldigt olika ut - men en sak är säkert, här får du använda dina

kompetenser och sätter själv gränsen för hur mycket du vill utvecklas. Som ett kunskapsbolag är det viktigt för oss att våra

specialister delar med sig av sin kompetens och får kollegorna att växa.

Rollbeskrivning:

Vi söker för vår kund i Stockholm en Säkerhetsansvarig/Incident manager

Som Säkerhetsansvarig / Incident Manager ansvarar du för att hantera och utveckla organisationens säkerhetsarbete, både operativt

och strategiskt. Rollen kombinerar incidenthantering i det dagliga arbetet med långsiktigt förbättrings- och utvecklingsarbete av

processer, verktyg och tjänster inom cybersäkerhet.

Operativa uppgifter:

Hantera dagliga säkerhetsincidenter för att upprätthålla verksamhetens kontinuitet.
Arbeta nära IT-serviceägare och affärsenheter för att lösa incidenter.
Ta ansvar vid större säkerhetsincidenter och koordinera involverade funktioner.
Säkerställa att processer följs och att återkommande incidenter utreds och hanteras.
Följa säkerhetstrender och agera proaktivt.

Strategiska uppgifter:

Driva långsiktiga förbättringar av processer och säkerhetsfunktioner.
Ansvara för säkerhetsverktyg och tjänster (t.ex. SIEM, sårbarhetsanalys, SOC-tjänster).
Ställa krav på externa leverantörer och leda projekt inom säkerhetsområdet.

Samarbete och kommunikation:

Arbeta nära interna och externa intressenter inom både IT och affärsverksamheten.
Driva en förbättringsagenda för att stärka säkerhetsfunktionen.

Kompetenser och erfarenheter

Flera års erfarenhet inom cybersäkerhet.
Erfarenhet av incidenthantering, gärna med kunskap om ITSM.
Tidigare roll som säkerhetsanalytiker (nivå 2), teamledare eller liknande inom SOC.
Projektarbete i större organisationer med många IT-tjänster; projektledning är meriterande.
God kommunikationsförmåga på svenska och engelska, både muntligt och skriftligt.
Erfarenhet av arbete i internationella miljöer är ett plus.

Personliga egenskaper

Lösningsorienterad och van att analysera komplexa incidenter.
Engagerad, driven och initiativtagande.
Förmåga att kommunicera tekniska koncept till både tekniska och affärsorienterade intressenter.
Trivs med både självständigt arbete och samarbete i team.
Tar ansvar, är beslutsför och agerar tryggt i högt tempo.

Ansökan

Tror du att du är Techster Solutions nästa stjärna? Tveka då inte att skicka in din ansökan redan nu. Urval sker löpande och

tillträde sker enligt överenskommelse.

ARBETSPLATS OCH KULTUR

Vi är ett entreprenördrivet IT företag, med både produktkunskap och försäljning (Techster AB) och konsultativa tjänster (Techster

Solutions AB). Det innebär att vi är mycket öppna för nya tekniska lösningar, kunskapsutbyte och ständigt lärande. Att ha roligt

och samtidigt behålla den familjära andan utan hierarkier är lika viktigt.

Vi vill skapa det konsultbolag som du alltid velat jobba för, men kanske inte hittat ännu. Redan idag har vi en blandning av

seniora och yngre medarbetare, såväl som män och kvinnor. Det vill vi fortsätta att bygga på. Så välkommen med din ansökan!

Role

Cyber Security - Incident Manager

Tags for this job

Cyber Security Svenska Engelska

Similar Jobs

SecOps Engineer

Tavana IT AB•Stockholm

For our customers, we are looking for several SecOps Engineers. Are you ready for new challenges in 2026? We look forward to receiving your application. Overall objective of role: Our business is in a constant journey of change and digitalization where security is a high priority. The SecOps Engineer has a key role in protecting the company’s computers, mobile devices, IoT devices, networks, software, hardware, platforms and data from malware and cyber-attacks whether these components exist on-site or in the cloud. Essentially to oversee the design and development of the IT infrastructure and security standards.  As a SecOps Engineer, you will develop and raise the organization's level of IT security and contribute to greater resilience in security. Primarily, the role has a tactical focus but also has elements of both operational and strategic tasks. Primary responsibilities: You will have a key role in IT security, risk exposure, and IT security incident management. You will work closely with and have the support of the business stake holders such as, but not limited to, CIO, CTO, CFO, Manager IT Operations and Head of IT Development as well as partners / service providers and other resource support in the security area. You will hold service responsibility for maintaining and developing our IT security capabilities and interaction with service providers of IT security products. You will have the responsibility for the contact and relationship with external Security Operations Center and the IT security incident process. You will be working with and keeping track of the company cybersecurity roadmap both long- and short-term in the area. Responsible for the IT security domain within the IT Architecture Council in review and decisions regarding IT security architecture. Work tasks: * Describe and review the IT cybersecurity architecture and support in strategic path choices and analyses * Be an advisor and act as a SME within the IT organization and actively support IT architects, service owners, developers and stakeholders with IT security expertise and convey security requirements, principles and guidance in architecture and design * Support in risk assessments and supplier assessments related to IT security * Take a leading role and actively drive improvements in the field IT security * Anchoring the security work and ensuring that the users within the organization understand and follow our rules and regulations within the area of IT security * Be responsible for the prevention of IT security risks and follow-up of incidents * Coordinate initiatives, measures and implementation of security solutions to ensure that all systems meet requirements from an IT security perspective * Assist with external monitoring in the area of IT security and contribute with IT security expertise in cooperation forums with other organizations, partners and vendors. * Liaise with Head of Legal for collaboration of activities related to GDPR responsibilities that lies on IT Key responsibilities: Key areas of responsibility include (but are not limited to): * Develop and drive the security roadmap, including prioritization of most important for customer. * Be familiar with and able to work in an operational “hands-on” as well as in a security architecture role, and work closely with stakeholders. * Planning, updating, and maintenance of the security measures, defenses and counteractions to stop and avoid internal and external occurrences. * Manage penetration testing of both applications and infrastructure * Perform susceptibility scans and manage the resolution of threats as well as continuously evaluate techniques for how to handle Phishing, Spoofing, etc * Assess software as a service (SaaS) product for security compliance * Manage security applications * Conduct periodic user access control verifications as well as evaluate existing solutions for MFA, e.g. YubiKey, Apple Passkey etc * Develop and maintain security monitoring, logging, and auditing * Install required security patches and updates for a wide range of applications * Monitor system security relating to resiliency, malware intrusion, and patching * Assess technical controls and identify areas of improvement * Serve as technical security lead * Conduct systems testing to ensure that critical vulnerabilities become identified * Be updated on the latest within the area of cyber threats, etc, and evaluate how to best protect the company resources * Create and maintain a Business Continuity Plan (BCP) * Responsible for our SOC-work, EDR, XDR, NDR, etc * Deliver and adopt according to the IT Service Delivery Management and IT Operations life cycle * Change, release and deploy management life cycle is adopted and followed. * Participate in Incident Management, Problem and Change Management * Help automate and streamline our operations and processes * Develop and maintain scripts for automation and monitoring * Hybrid and cloud infrastructural components such as general compute services, VPC, PKI Management, Networking, Storage services, security systems, communication systems, and backup operations * Proactively maintain and monitor delivered IT systems and related services * Ensure all servers and related workloads have required security compliance for patch management, anti-malware, and other threat protections applied and up-to-date * Work collaboratively with other operations staff, development and service delivery teams to ensure critical L.O.B. systems and services are available 24 x 7 x 365 * Works closely with NOC and SOC as an escalation tier for customer support and for operative production cases * Identify, categorize and respond to Network, Security & Compute system events and alerts * Record, track, follow-up and maintain documentation of systems and the ITSM processes * Engage with hardware and software vendors and suppliers as needed * Ensure that the business (customer) expectations are met or exceeded * Fulfil individual SMART goals and KPI’s through everyday work. * Perform internal audits and auditable evidence of internal audits for non-technical areas * Monitor, verify, measure delivered services and solutions from suppliers and partners * Review survey feedback to improve delivered services, SLA’s, tools and support experience. * Perform backup and restore operations * Be part of Line of Business-related projects * Possible rotate in on-call rotation * Mentor junior employees within the function * Adhere to policies, procedures and routines Experience: * +5 years of operational experience in IT security field(s) Skills, qualifications, and knowledge needed: * Degree in Computer science or equivalent * Self-motivated * Natural ability to influence and build trust * Team player * Capability in anti-malware software, interruption recognition, firewalls, and content filters * Knowledge about threat assessment tools, skills, and procedures * Highly organized with attention to details * Strong problem-solver with a pragmatic approach * Strong verbal and written communication skills * Professional fluency in English, both writing and speaking * IT order management, procurement and project coordination * Advanced knowledge and experience of managing, monitoring and supporting a multi hybrid cloud compute IT infrastructure environment * O365 Administration (Exchange, Teams, SharePoint, OneDrive etc) * Advanced knowledge and experience working with different kind of anti-malware and threat protection services * Advanced knowledge and experience working with user and service catalog services such as Active Directory and Azure AD * Experience working with Identity Access Management and SSO * Experience working with Enterprise Mobility and Device Management * Advanced knowledge and experience working with datacom and networking services * Advanced knowledge and experiencing working with backup and restore operation services * Skilled with PowerShell scripting * Advanced knowledge of and experience supporting PCs and Macs within Microsoft network and Office 365 environment * Microsoft Azure services and AWS * Microsoft SQL Server, IIS * Experience with modern ITSM processes and techniques. * DNS & PKI Management * General knowledge and experience working with multi-platform environments such as Windows Client and Server OS, Mac OS X and mobile devices based on iOS/Android Advantages: Meriting with knowledge in: * Microsoft certifications is a plus. * Meriting with ITIL certification * Meriting working with O365 Defender, Defender for Endpoints * Meriting working with public cloud services such as GCP and AWS * Meriting with Cisco Meraki, Fortinet solutions * Meriting with ServiceNow and AzureDevOps tooling * Retail, wholesale, e-commerce or logistics business flows. * Fashion industry.

Deadline: Sep 3Posted: Dec 10

Security Analyst specializing in Operational Technology (OT)

Orange Cyberdefense Sweden AB•Stockholm

As a Security Analyst, you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work, you will have access to a range of SIEM, SOAR, and XDR platforms. In this role, you will proactively and reactively defend our customers against cyberattacks. In addition, you will be involved in a growing Operational Technology (OT) security area, where your responsibilities will include monitoring and analyzing security alerts from OT environments. Key Responsibilities Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel). Manage solutions that provide customers with visibility into their OT environments, including presenting findings and leading continuous improvement initiatives. Analyze and mitigate threats using EDR and XDR platforms. Act as a Technical Delivery Manager for assigned customers, serving as their primary technical point of contact, delivering monthly reports, and maintaining customer environments. Independently evaluate security events and determine appropriate response actions. Document incident timelines and investigation findings. Advise customers on security incidents and recommended remediation actions. Perform proactive threat hunting. Develop and refine detection rules. Improve existing processes and design new operational procedures. Contribute to our internal threat intelligence database and indicators of compromise (IOCs). Continuously expand your technical expertise through training and professional development. Configure, manage, and maintain log management platforms (Splunk and Microsoft Sentinel). Deploy infrastructure and install components for new customer environments. Provide customer support, onboarding, and troubleshooting for SIEM solutions. Why Join Orange Cyberdefense? Become part of one of the cybersecurity industry's leading organizations, working with market-leading technologies. Join a collaborative, low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the company's direction. Work in an environment that values curiosity, autonomy, knowledge sharing, and continuous learning. Help secure major international organizations against evolving cyber threats. Benefit from excellent opportunities for professional development and specialization. About Orange Cyberdefense Orange Cyberdefense is Sweden's leading cybersecurity company, with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services, ranging from highly technical solutions such as Security Operations Centers (SOC), firewall solutions, technical threat intelligence, vulnerability management, and SIEM, to governance, risk management, and security strategy consulting. We are a global team of approximately 3,000 colleagues, including 400 employees in Sweden. At Orange Cyberdefense, diversity is one of our greatest strengths. We believe that different backgrounds, experiences, and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process. Who We Are Looking For We are looking for someone with post-secondary education or professional experience in cybersecurity, digital forensics, or network security. Previous experience in a similar Security Analyst role is considered an advantage. As a person, you are courageous, curious, and trustworthy. You build confidence with customers, contribute to the company's success, and collaborate effectively with colleagues. You are able to gather and assess information, distinguish critical details from noise, build a comprehensive understanding of security events, and communicate your findings clearly to both technical and non-technical audiences. We value curiosity, creativity, independence, and initiative even more than complete expertise. For this particular team, you will work with public sector customers, meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English, spoken and written, is also required.

Deadline: Jan 20Posted: Jul 24

IT-säkerhetsteknikerReactRust

Security Operations Engineer

Kambi Sweden AB•Stockholm

Security Operations Engineer We are now hiring for a Security Operations Engineer to join our Security team. This team drives the security programs within the business, with a heavy focus on people, processes, and automation of services. Kambi is looking for someone who wants to encourage and foster a culture of security awareness and regulatory compliance by making it easy for those less knowledgeable to Do It Right. About the Security team: You would be implementing technologies for vulnerability management, authentication and identity management, and creating security with automation. A focus for our team is to create paved roads for Development and Operations teams, to ensure they can easily secure their applications and maintain security throughout the organization. The Security Operations team also responds to incoming security threats and incidents. We provide expert security knowledge to the wider organisation. We use automation tools like Puppet, Ansible and Terraform, and work in a diverse environment with physical and virtual machines, as well as containerized workloads both on-prem and in AWS. About you: We will be very happy if you have commercial industry experience working in a security team, in either offensive or defensive roles. Additionally, previous experience working with Linux or AWS is needed, and it's a huge bonus if you have spent time working with actively with security in these areas. Prior experience with identity and authentication systems for web and Linux integrations are valued. We'd love if you were investigative, curious and passionate about security and privacy. What's in it for you? Help to secure people, every day Opportunity to work in a successful and fast-growing company A fun, flexible and Agile working culture Ability to directly influence your and your teams' work environment and processes International work environment Opportunities to travel Security Engineer I Security Operations Engineer I Cyber Security Engineer I DevSecOps Engineer I Security Consultant #wearekambi

Deadline: Sep 1Posted: Jun 12

IT-säkerhetschef/IT security managerAWSLinux