IT Security Specialist with a Focus on Threat Hunting and Incident Management

At FRA, we work on something that no one else does in Sweden, and you can be a part of it. Regardless of your job role, we contribute to societal benefit by working towards a meaningful purpose — together we tackle unique tasks for Sweden's security and integrity.

We offer interesting tasks with good opportunities for personal development, and we are convinced that a mix of people with different backgrounds creates a dynamic and creative work environment – our differences are our strength.

Do you want to contribute to societal benefit and support Sweden's independence in the world? FRA is now looking for an IT Security Specialist focused on threat hunting and incident management in FRA's internal environments. If you are the one we are looking for, we can offer a varied job in an innovative and unique environment. At FRA, we work on unique tasks – for Sweden's security and integrity.

Your Mission

As an IT Security Specialist focused on threat hunting and incident management in our internal environments, you will belong to FRA's security office within the department for operational support. The task of the security office is to ensure FRA's own security protection for the authority's various operations based on its specific conditions.

In the role of IT Security Specialist, your main tasks will be threat hunting and IT incident management, primarily in the form of:

• Analysis of logs within the Security Operations Center (SOC) in general
• Looking for anomalies, both through log analysis and in IT infrastructure
• Participation in the Incident Response Team (IRT) at the operational level
• Handling incident cases, from start to finish

You will be part of a team and will work both independently and together with colleagues who have similar tasks in the security office. Parts of the work will cross functional boundaries within the security office, which means you will also work together with colleagues belonging to other functions, such as physical security and personnel security. In addition to collaboration within the security office, you will work with other departments within FRA, including the Technical Department and the Cyber Department. Travel may occur in this position.

You Can

We are looking for someone who has:

• High school education
• Technical basic knowledge in the operation of larger IT environments, IT and network technology, as well as IT security work, which can be acquired through studies or relevant work experience
• Knowledge and experience in e.g., Python, Powershell, JavaScript
• Good knowledge in at least one of the following areas: security and traceability functions in IT systems or penetration testing
• Good knowledge of Swedish and English in both spoken and written form

We consider it an advantage if you have:

• Experience in incident management and incident investigation within IT
• Experience in threat hunting
• Knowledge of efficient operation in larger IT environments, as well as automation
• Experience with DevOps or other agile working methods
• Experience in security reviews and/or penetration tests as well as IT forensic work and IT incident investigations.
• Experience from working in a SOC
• Experience in development in modern IT environments
• Experience in the operation of large IT environments.
• Experience of working in or with security-sensitive operations
• Experience in hunting activities in IT environments or other types of operational IT incident management activities.
• Good knowledge and certification in security and traceability functions in IT systems

You Are

We will place great importance on your personal qualities and are looking for someone who, in addition to your technical commitment, uses your experience flexibly and has a problem-solving attitude. The tasks involve partly independent work, which requires initiative, self-motivation, and the ability to plan, prioritize, and complete tasks. You listen effectively and communicate clearly. Since you work closely with both your own team and other parts of the authority, it is important that you have collaborative skills and that you create engagement and participation with a positive attitude.

Our Offer

At FRA, every task is part of something bigger. In one way or another, you as an employee will contribute to protecting Sweden's integrity and independence in the world. You make a real difference every day.

Our employees have high competence, but we can always improve. Therefore, professional development is a given for us. We offer opportunities for skills development. As a new employee, you will broaden your skills right away with a comprehensive introductory training that gives you a greater understanding of the mission and helps you integrate into the organization. As an employee, you will also have the opportunity to find the right training within your specialty to become even better at what you are passionate about.

We value good health among our employees and offer, among other things, wellness during working hours. Other benefits we offer include a gym at the workplace and leader-led activities, free parking, the possibility of leave on bridge days, extended parental leave, and beautiful surroundings.

With us, you will become one of the best. In your own way.

More Information

The workplace is located near Drottningholm, about 10 minutes by bus from Brommaplan. Swedish citizenship is a requirement as employment at FRA involves placement in a security class. A requirement for employment is a passed security clearance with a background check. The security clearance will be conducted in accordance with the provisions of the Security Protection Act. Employment comes with an obligation to be placed in a war situation. We apply a six-month probationary period. For more information, please contact the recruiting manager at 010-557 47 91. Union representatives can be reached at 010-557 46 00.

We accept applications via www.fra.se (http://www.fra.se) no later than 2025-04-13. Reference number: 2025FRA469

As we have already decided on the recruitment channels we wish to use for this recruitment, we kindly ask not to be contacted for further offers of advertising and recruitment assistance.