IAM Security Engineer

Nordnet Bank AB

Nordnet redefined the financial world as the first digital bank in Europe. Now we are about to do it again and the aim is to create the next generation of bank, in the cloud. We know that this requires great people, great teams, and great technology. Do you want to join us and build the new Nordnet? At Nordnet we want to democratize savings and investments by giving our customers access to the best tools and information whether you are a professional investor or a small saver. With modern technologies and speed of delivery, we are building the next generation investment platform. This is part of the role Nordnet is a company with tech as the primary focus. In our agile and autonomous teams, you will be working with engaged colleagues that love to share their knowledge. As a cloud security engineer, you will drive automation and integrate DevSecOps into our cloud-based platform by embedding security in Continuous Integration/Continuous Delivery (CI/CD) pipelines, enhancing infrastructure security and ensuring secure software development practices. As a Cloud Security Engineer acting autonomously and with a clear mandate, you will: Develop and enforce cloud and Infrastructure As Code (IaC) security policies. Improve cloud security monitoring by building and managing detections. Collaborate with engineering teams to ensure security best practices and Secure Software Development Life Cycle SSDLC (Shift-Left). Facilitate threat modelling sessions, secure code review and vulnerability assessments. Coordinate penetration testing efforts and track remediations. Enable developers to ship fast by automating security Balance security rigor with business agility; we don't just secure, we enable. This is you To succeed in this role, we believe that you take great pride in your work, are curious and continuously want to learn and grow. Believing in collaboration and discussing ideas and concepts with your colleague, you will serve as the first point of contact for our Platform teams as a Cloud Security Subject Matter Expert to enable the delivery of great products. As a Cloud Security Engineer, you have: Offensive security mindset ideally with former red teamer or penetration tester experience Knowledge of Google Cloud Platform (or equivalent experience with other Cloud providers) Google Security Command Centre (SCC) Google Kubernetes Engine (GKE) Identity and Access Management (IAM) Infrastructure As Code (Terraform) Github Ability to work independently and as part of a team Strong stakeholder management skills, ability to work with both technical and non-technical stakeholders Ability define and implement security requirements in cloud environments Experience with security best practices and vulnerability management process. Familiarity with programming and major frameworks (Java, Spring, React) What we offer Your expertise and contribution will be appreciated from day one Access to the latest AI tools with cutting edge models to support your daily work. Plenty of opportunities to grow as a security professional Competitive salary and compensation Opportunity to shape the architecture, influencing the security design of Europe’s next-generation digital bank from the ground up. Access to training opportunities such as professional certifications (e.g., GCP Security, OSCP, OSAI+, CISSP), industry conferences, and dedicated time for skills development. You won't just follow a checklist; you’ll have the mandate to build and own your security automation roadmap. We offer you the opportunity to work in a Nordic environment with a strong focus on delivery, product development and technology. Our ambitions are high and you will embark on a fast and challenging journey together with a skillful team of sharp and committed colleagues. Our teams are autonomous and embrace the agile way of working. Culture is built and cared for, each day by everyone. We’re proud of ours. Having a flat organization where anyone can talk to anyone creates a warm and friendly atmosphere worth protecting. We believe in a culture where every effort counts and where everyone is being recognized. A culture embracing our core values – passion, simplicity and transparency on all levels, no matter who you are or what you do. We are over 900 employees located in Stockholm, Oslo, Helsinki, Copenhagen and Frankfurt. Visit us on: career.nordnetab.com/pages/engineering Learn more about Nordnet in our brand movie This is Nordnet, that describes our identity. Questions & Applications Please note that we will start reviewing applications after the summer holidays. To ensure a fair process and that your data is handled securely, we only accept applications through our recruitment system, applications sent via email will not be considered. If you have questions, please contact Hiring Manager Ralph Benton at ralph.benton@nordnet.se We want to inform you that Nordnet conducts mandatory credit and background checks, as well as drug testing as a part of our recruitment process. We look forward to receiving your application!

Apotea Sverige AB

Tech Innovation at Apotea Apotea is Sweden’s largest online pharmacy, committed to making healthcare products accessible and efficient for everyone. Our Tech department aims to redefine how AI and automation drive modern businesses — not by forcing AI into traditional workflows, but by creating AI-driven systems that give humans control, insight, and the ability to apply their expertise where it matters most. The Core Technology team builds the architectural foundation supporting e-commerce, logistics, data, AI/ML, and customer experience. We ensure all development aligns with our long-term vision and contributes to Apotea’s growth. We are now looking for a Lead Security Engineer to take full ownership of Apotea’s security strategy, ensure compliance, and enable teams to build and innovate securely at scale. The Role As Lead Security Engineer, you will define, implement, and evolve security practices across AWS (serverless-first), e-commerce, logistics, and data platforms. The role combines strategic leadership with hands-on engineering — you will implement security yourself while empowering others to do so. You will act as the first-line technical security lead, defining guardrails, monitoring risks, and leading incident response. You will develop secure practices for coding with AI assistants, ensuring generated code meets security standards, avoids data leakage, and aligns with regulations. You will also communicate complex security concepts clearly across the organization. Location: Sveavägen 168, Stockholm, Sweden (On-site) Key Responsibilities Security Leadership Own and evolve Apotea’s security strategy across cloud, applications, and infrastructure. Translate business and regulatory requirements into sustainable security practices. Define guardrails, best practices, and reference implementations for teams. Hands-On Security Engineering Design and implement secure AWS serverless and data-driven systems. Lead IAM practices, enforcing least-privilege and zero-trust. Oversee vulnerability management, penetration testing, and patching. Ensure secure DevSecOps pipelines and IaC security. Monitoring & Incident Response Build and operate monitoring, detection, and alerting systems (SIEM, EDR, GuardDuty, Security Hub). Lead incident response: investigate, contain, and recover from security events. Maintain and test playbooks for emerging threats. Governance & Compliance Ensure GDPR, healthcare regulations, and industry standards compliance. Embed security and privacy by design across development. Partner with legal, compliance, and business units for regulatory readiness. Provide training and frameworks for safe AI usage without compromising security. Collaboration & Culture Work closely with engineers, architects, and product teams to integrate security early. Mentor engineers in secure coding and infrastructure practices. Advocate for a strong security culture. Qualifications Extensive experience as a security engineer and organization’s main security expert. Proven expertise in securing AWS (IAM, networking, serverless, encryption, monitoring). Strong background in designing secure, scalable, cloud-native systems. Hands-on experience with SIEM, EDR, vulnerability scanners, secrets management. Deep knowledge in DevSecOps and IaC (CDK, Terraform, CloudFormation). Programming/scripting skills: Go, TypeScript, .NET, Python, or similar. Nice to Have: experience in regulated industries, compliance frameworks (ISO 27001, NIST, PCI-DSS), or red/blue team operations. Why Join Apotea? Stable company with a meaningful mission: improving healthcare accessibility. Work on cutting-edge AI, ML, and automation impacting millions of customers. Modern cloud-native technologies (serverless, AI, event-driven). Flat, agile organization with minimal bureaucracy. Career growth through training, mentorship, and conferences. End-to-end project ownership from concept to deployment. Culture of experimentation, collaboration, and innovation. About Apotea Apotea.se is Sweden’s largest online pharmacy, with the country’s broadest range of over 32,000 non-prescription items and nearly 19,000 prescription drugs for humans and animals. Recognized as Sweden’s most sustainable e-commerce company (Sustainable Brand Index 2021), we simplify everyday life for our customers with fast deliveries and expert advice. In 2024, Apotea reached a turnover of SEK 6.5 billion and currently employs about 1,000 people across Stockholm, Lidingö, and Morgongåva. Apotea is an inclusive employer that values diversity. We welcome all applicants and strive to create a work environment where people, regardless of background, gender, age, religion, or disability, can thrive and grow. Recruitment Process Apply Interview: Screening Interview: Technical Capabilities Interview: Culture Fit Background Check: As a pharmacy, we always conduct a background check. Offer Presented Application Do not hesitate to send in your application already today. For more information or questions, visit our career page or contact us at jobb@apotea.se. We do not accept applications via email. LinkedIn Instagram Join Us and Make a Difference - We hope you want to be a part of our team! Submit your application today—interviews are conducted on an ongoing basis, and the position may be filled immediately. Start date by agreement. Welcome to Apotea – where technology meets health and creates magic!

Professional Galaxy AB

Build the Future of Technology with Professional Galaxy AB Professional Galaxy AB is an IT and technology consulting company providing highly specialized expertise in IT, software development, SAP, procurement, electronics, and mechanical design. We collaborate with experienced senior experts and deliver strategic, value-driven competence in complex and analytically demanding projects. Our focus is always on high quality, professionalism, and clear, measurable results. We are now looking for an IAM Engineer/Analyst The role is positioned as an IAM Engineer/Analyst, focused on delivering technical expertise, platform configuration, and capability improvements within the IAM domain. The emphasis is on hands-on engineering, implementation, troubleshooting, and support activities. Key knowledge areas: Core IAM & Directory Expertise Ensuring secure and reliable identity operations. Protocols & Integration Skills Solid understanding of modern authentication standards. Automation & Troubleshooting Ability to diagnose authentication, access, and identity platform issues across cloud and on-prem environments. Role responsibilities: The IAM Engineer is expected to: Work hands-on across core IAM areas such as identity lifecycle automation, authentication, authorization models, IGA workflows, PAM solutions, directory services, and non-human identity management Configure, optimize, and maintain IAM platforms and services in alignment with security standards and best practices Implement IAM controls, integrations, policies, and automation across the organization Collaborate with architects, governance teams, and security stakeholders to translate requirements into technical solutions and configurations Contribute technical input to design discussions, capability improvements, and IAM roadmap activities without owning delivery timelines Troubleshoot identity-related issues, support incidents, and ensure stability and quality of IAM services Assignment Details Application deadline: 2026-05-17 Start date: 2026-05-18 End date: 2027-05-31 How to Apply Are you the right person for this assignment, or do you want to recommend a strong candidate? Please apply via the Professional Galaxy AB process with: Your updated CV Your availability to start A short motivation describing your suitability, including relevant experience and background Öppen för alla Vi fokuserar på din kompetens, inte dina övriga förutsättningar. Vi är öppna för att anpassa rollen eller arbetsplatsen efter dina behov.