Senior IT Security Specialist

Do you want to work with IT security close to development and receive a clear mandate to translate identified security risks into concrete actions? We are now looking for a senior IT security specialist for one of our customers in Stockholm.

Here, you will have a central role in security work where the focus lies on getting things done together with the development teams. You will work both proactively and reactively with security issues, incidents, and vulnerabilities – with great scope to use your experience to assess what is actually most important to prioritize.

ABOUT THE ROLE:

As a Senior IT Security Specialist, you will become an important link between security and development. You will receive security findings from, for example, scanning, audits, incidents, and external reports, translate these into concrete actions, and together with the development teams ensure that the right things are addressed.

The role normally does not involve you writing code yourself. However, you need to have a good technical understanding, understand the developers' reality, and be able to communicate security issues in a way that works in practice.

An important part of the role is being able to make risk-based prioritizations. Not all security risks are equally critical, and you need to be able to understand the big picture, identify what is most worth protecting, and assess which actions provide the greatest effect based on both business needs and technical reality.

You will also function as an experienced "second opinion" when complex security issues arise and contribute to developing the teams' competence and working methods within security.

YOUR MAIN TASKS:

• Receive and analyze security findings from scanning, audits, incidents, and external reports
• Translate identified vulnerabilities and risks into concrete actions for the development teams
• Drive and follow up to ensure that prioritized security measures are implemented
• Work with incident management, including log analysis and technical assessments
• Make risk-based prioritizations based on business benefit and technical reality
• Provide quick recommendations during security incidents, for example, regarding whether systems or functionality need to be limited or shut down
• Function as an experienced second opinion in complex security issues
• Collaborate closely with developers and other technical functions
• Contribute to developing the teams' knowledge and ability within the security area

WE ARE LOOKING FOR YOU

Who has solid experience in IT and cybersecurity and is used to working closely with development teams in technically complex environments.

You have the ability to move from an identified risk to actual action and understand that successful security work is as much about prioritization, communication, and implementation as it is about identifying vulnerabilities.

To succeed in the role, we see that you:

• Have senior experience in IT security
• Have a good understanding of software development and the technical reality of developers
• Can analyze security findings and translate them into concrete and feasible actions
• Have experience in incident management, log analysis, and technical security assessments
• Work pragmatically and risk-based rather than seeing security issues as black or white
• Can identify the business's most critical assets and prioritize security work accordingly
• Are confident in making and communicating quick decisions when the situation requires it
• Can challenge, support, and collaborate with development teams without the security work becoming a hindrance to development

Experience from penetration testing, offensive security, or similar work with vulnerabilities, root cause analysis, and risk reduction is highly meritorious.

You also need to be comfortable working in English, which is the corporate language.

ABOUT THE COMPANY

Our customer is a Swedish consulting company operating within IT, telecommunications, and industry. The company works to connect specialist competence with technically complex operations and has a clear focus on quality, long-term collaborations, and competence development.

You will become part of an organization where technical competence is highly valued and where you get the opportunity to work with advanced issues while continuing to develop within your specialist area.

OTHER INFORMATION

Scope: Full-time

Start: According to agreement

Salary: Competitive

Working hours: Office hours

Location: Kista, Stockholm

As an employee, you are offered, among other things:

• Wellness allowance
• Flexible working hours
• Competence development
• Training grants
• Occupational pension
• Bonus opportunities
• Social activities

The role is for you who want to combine deep security competence with a business-oriented and pragmatic working method, and who is motivated by the fact that security work actually leads to concrete improvements, not just reports and recommendations.

RECRUITMENT PROCESS & CONTACT

This is a direct recruitment, which means that the candidate who gets the position will be employed directly by our customer. The recruitment process is managed by Nordicrule, and our customer requests that all questions regarding the position be emailed to Nordicrule.

Fahim Gani: fahim.gani@nordicrule.se