Security Engineer

• Planera, genomföra och rapportera penetrationstester av webbapplikationer, nätverk och infrastruktur
• Identifiera sårbarheter och säkerhetsbrister samt ge konkreta rekommendationer för riskreducering
• Presentera resultat och slutsatser för såväl tekniska specialister som ledningsgrupper och verksamhetsrepresentanter
• Hålla utbildningar, workshops och säkerhetsrelaterade presentationer för olika målgrupper
• Bygga och utveckla långsiktiga kundrelationer samt agera rådgivare inom offensiv säkerhet
• Bidra till metodutveckling, kunskapsdelning och kompetensutveckling inom teamet

Senior Penetrationstestare

• Lead and coordinate group-wide IT security initiatives and projects
• Drive onboarding of acquired companies into group security solutions, standards, and frameworks
• Introduce new security tools for group companies
• Own and consolidate the group-level IT security risk picture
• Identify trends, recurring risks and systemic weaknesses, and translate them into group-level priorities and actions
• Act as a technical discussion partner within Microsoft cloud security and other security solutions
• Contribute to governance, compliance, and decision material

IT Security Specialist – Project & Risk

• Contribute to the design and ongoing evolution of the organisation's security culture and awareness strategy
• Help define principles, frameworks, and best practices for security learning and awareness
• Mentor and support junior specialists in both delivery and professional development
• Drive complex, high-impact awareness initiatives and campaigns from concept to execution
• Analyse trends in human-related security risk and translate findings into actionable recommendations
• Advise security leadership on cultural risks, workforce behaviours, and the effectiveness of awareness programmes
• Lead cybersecurity incident-related communication activities from a culture and awareness perspective

Cyber Security Culture Specialist

• Focus on continually improving HVDCs cybersecurity posture and offerings
• Advance the implementation of the cybersecurity strategy
• Support many projects in parallel
• Help the projects to streamline the cybersecurity solutions
• Help with implementation of cybersecurity tools, running them and analyzing the results
• Be a part of the development of the HVDC Cybersecurity team.

Cybersecurity Engineer

• Help shape how cybersecurity is understood, communicated, and embedded in everyday work across a large enterprise environment
• Contribute to the development of security culture and awareness approaches
• Strengthen learning and communication practices
• Support initiatives that reduce human-related security risk
• Work close to security leadership and play an important part in turning complex security topics into practical, effective actions for the wider organization
• Support incident-related communication from a culture and awareness perspective

• Contribute to the design, delivery, and continuous improvement of security awareness and culture initiatives
• Develop engaging, role-based learning and communication materials
• Help plan and run awareness campaigns, phishing simulations, and learning activities
• Translate security risks and incidents into clear, relevant messages for different audiences
• Measure the effectiveness of awareness initiatives using qualitative and quantitative feedback
• Apply behavioral insights to improve engagement and adoption of secure practices
• Help ensure security guidance is practical, usable, and aligned with how people actually work
• Collaborate with security teams, communications, HR, and other stakeholders
• Support incident-related communication activities when needed

Cybersecurity Culture Specialist

• Own and lead the Incident Response function, including strategy, governance, and operational execution.
• Direct and optimize daily IR operations, ensuring efficient handling of security incidents, escalations, and threat hunting activities.
• Act as the central coordination point during major incidents, ensuring structured response, clear communication, and minimal business disruption.
• Design, maintain, and continuously improve incident response playbooks, workflows, and escalation procedures.
• Review and quality-assure investigations, ensuring consistency in analysis, evidence handling, and decision-making.
• Collaborate with internal teams and external partners to ensure seamless incident management.
• Lead, mentor, and develop the IR team, promoting technical excellence, accountability, and continuous learning.
• Support crisis management activities, including participation in tabletop exercises and real-world incident coordination.
• Ensure alignment with regulatory, legal, and compliance requirements related to incident response and breach handling.
• Drive integration between detection engineering, threat intelligence, and response to enhance overall security effectiveness.
• Proactively hunt for threats and integrate intelligence to anticipate attacks. Develop and refine detection content and rules (e.g., SIEM, EDR) to map against adversary tactics.
• Identify gaps in current capabilities and lead initiatives to enhance tooling, automation, and operational maturity.
• Build and maintain a strong collaboration with all are strategic MSSP and security vendors to enhance security operations and fully utilize available resources and expertise.
• Produce and present executive-level reporting, including incident trends, root cause analysis, and business impact assessments.

Incident Response Lead – Global Security

• Define and execute atNorth’s information security strategy, aligned with business objectives and growth plans
• Act as senior authority and trusted advisor to executive leadership on information security, risk, threats, and compliance posture
• Own and lead key compliance and certification programs, including SOC 2 Type II, NIS2, and ISO/IEC 27001 (including continuous improvement)
• Establish and enforce governance structures that ensure clear control ownership and accountability across all departments
• Drive remediation of non-compliance and escalate material risks or deviations to executive leadership when required
• Ensure enterprise-wide information security risks are identified, prioritized, actively managed, and communicated in business-relevant terms
• Lead incident response governance, executive communication, and post-incident corrective actions
• Own and ensure the evolution and execution of the Business Continuity Management (BCM) framework
• Act as primary interface for information security auditors, regulators, and customers
• Lead and develop the information security team, setting clear direction, priorities, and accountability

Information Security Manager

• Hantera säkerhetsincidenter end-to-end och driva incident response-processer
• Arbeta operativt med SOC-drift och säkerhetsövervakning
• Utföra riskbedömningar av leverantörer och system
• Utveckla och implementera policyer, standarder och säkerhetsriktlinjer
• Övervaka och analysera endpoint-baserade hot och sårbarheter
• Driva säkerhetsmedvetenhet och utbildningsinitiativ
• Hantera identity and access management (IAM) inklusive SSO och MFA

Security Specialist

• Develop, implement and maintain processes, methods and tools for personnel security
• Lead a team of Security Generalists and Specialists
• Cooperate closely within the Naval Security Management Team and work with other relevant functions
• Liaise and collaborate extensively internally and externally
• Represent Naval Security in various forums at Saab

Head of Personnel Security

• Collaborate with cross‑functional teams to integrate security measures into the entire product lifecycle
• Conduct thorough risk assessments related to connected product deployments
• Identify potential vulnerabilities and implement proactive mitigation measures
• Design and implement secure architectures considering data integrity, confidentiality, and availability requirements
• Perform threat modeling activities
• Ensure implementation of cybersecurity policies and conduct regular reviews to uphold solution security posture
• Develop and deliver cybersecurity training programs for internal teams involved in connected offer development, deployment, and maintenance
• Collaborate with internal stakeholders to address security requirements related to commercial building solutions
• Communicate complex security concepts clearly to non‑technical stakeholders
• Collaborate with R&D teams to automate security processes in build and release pipelines

Cyber Security Advisor

• Arbeta i ett team med experter inom offensiv säkerhet och ta ansvar för hela leveransprocessen: definiera omfattning (scoping), designa tester, genomföra tester, analysera resultat, skriva rapporter och presentera fynd för både teknisk personal och ledning.
• Genomföra både traditionella penetrationstester och avancerade TIBER- och Red Team-uppdrag där du simulerar verkliga hotaktörer.
• Granska och testa webbapplikationer, API:er och mobila appar för att identifiera och dokumentera sårbarheter.
• Analysera och testa intern infrastruktur, nätverk, servrar och kommunikationsvägar för att hitta svagheter och förbättra skyddet.
• Undersöka behörighetshantering, konfigurationer och policies i Active Directory- och Windows-miljöer för att identifiera risker och förbättringsområden.
• Utvärdera och testa säkerheten i molnplattformar som AWS, Azure och GCP, samt ge rekommendationer för att stärka organisationens cloud security.
• Genomföra säkerhetsanalyser och tester av IoT-enheter, embedded systems, OT/ICS och automotive för att skydda kritiska funktioner.

See all jobs on JobTailor

Senior Penetrationstestare

IT Security Specialist – Project & Risk

Cyber Security Culture Specialist

Cybersecurity Engineer

Cyber Security Culture Specialist

Cybersecurity Culture Specialist

Incident Response Lead – Global Security

Information Security Manager

Security Specialist

Head of Personnel Security

Cyber Security Advisor

Senior Penetration Test Engineer