Operational Coordinator at CERT-SE

MSB works for a safer society in a changing world. We strengthen Sweden's ability to function in crises and even in war. This means that all our employees contribute to a country where people are prepared: From north to south, we spread knowledge and act to protect lives and health, the functionality of society, and fundamental values such as democracy, legal certainty, and human rights.

CERT-SE has entered a new phase in its development. Collaboration with the national cybersecurity center NCSC-SE has intensified, and in the long term, CERT-SE will be transferred to NCSC-SE. At the same time, CERT-SE is expected to increase its capabilities and provide support to more parts of society. To succeed, we need to strengthen our team and recruit new, knowledgeable, and committed employees for existing and new roles in the organization.

Your Responsibilities and Tasks

As an operational coordinator at CERT-SE, you will lead an operational team with various roles, including IT security specialists, in CERT-SE's daily operational activities, which include allocating and prioritizing resources, incidents, and cases. In the event of major incidents, you will act as the incident manager, which means you prioritize and coordinate the work related to the incident. You will also conduct follow-ups, evaluations, and development of incident management. You will participate in collaboration with various stakeholders in society, both nationally and internationally, and act as CERT-SE's operational contact point internally within the agency.

Your tasks will be performed during normal office hours, but during acute events, other working hours may occur. You will be part of CERT-SE's scheduled preparedness. You may participate in cybersecurity exercises, both nationally and internationally. Much is happening in the cyber domain, and the work will be characterized by a significant amount of organizational development alongside an event-driven operational activity, which means that your work is sometimes reactive and driven by external circumstances.

Your Knowledge and Competencies

We are looking for someone with professional experience in IT work in a larger organization or equivalent work experience that the employer deems comparable. Furthermore, you should have documented experience working in a coordinating and supervisory role. Relevant higher education for the position is meritorious but not a requirement; what matters is your potential and willingness. You are interested in and have experience in monitoring the external environment in the field. You are proficient in expressing yourself, reading, and writing in both Swedish and English. You are stimulated by challenges, improvement work, organizational development, and have a high ability to work independently and take initiative to drive your issues forward. We value a positive and solution-oriented mindset and your ability to quickly adapt to new conditions.

It is an advantage if you have:

• experience in leadership or incident management.
• experience in handling IT security incidents.
• professional experience from a CSIRT/CERT/SOC/control center or equivalent.
• IT incident-related training.
• systematic monitoring of the external environment.
• organizational development and improvement work.

As all employees and leaders at MSB, you are expected to work in a mission-oriented, development-focused, dialogue-oriented manner, have good self-awareness, and contribute by being a role model. Read more about our employee and leadership criteria.

In an operational environment, team spirit is an important part of the work environment and contributes to our ability to deliver. We place high demands on your ability to work independently and collaboratively with others, where the ultimate goal is to deliver cybersecurity benefits and contribute to a good workplace. You need to enjoy and be able to work under occasionally time-pressured conditions and be able to switch between simultaneous tasks. We will place great emphasis on your personal qualities.

About the Employment

We offer you a permanent full-time position that begins with a probationary period. Your workplace will be in Stockholm at our Tomteboda office, and travel may occur as part of the job.

Swedish citizenship is a requirement for employment at MSB as it involves placement in a security class. Employment requires a satisfactory result in the security screening with background check, conducted in accordance with the Security Protection Act. Most employees at MSB are designated for military service.

About Us

The position is located in the Operations for Operational Cybersecurity at the Incident Coordination Unit, which is part of the CERT-SE function. The Technical Incident Coordination Unit is one of four units at CERT-SE, Sweden's national CSIRT (Computer Security Incident Response Team). The unit's task is to be part of the CERT-SE function. Much of the work is done in collaboration with other units within CERT-SE, other parts of MSB, authorities, or organizations and functions, e.g., Sweden's national cybersecurity center NCSC-SE.

CERT-SE is a national function tasked with supporting society in the work of preventing and managing IT incidents and other cyberattacks. CERT-SE has a technical focus on mass-impacting cyber threats, vulnerabilities in commonly used products, and specific serious threats. This aims to contribute to the protection of critical societal functions and digital services as well as society at large.

CERT-SE receives, seeks, assesses, analyzes, processes, and disseminates cybersecurity-related information. This aims to spread information and knowledge that can prevent IT incidents but also when IT incidents are being managed. CERT-SE is Sweden's contact point for cybersecurity towards corresponding functions in other countries.

All of us who work at MSB are expected to contribute to increased gender equality and equal treatment for a work environment and a society free from discrimination.

Want to know more? If you have questions, contact unit manager Martin Götblad. Union representatives are Carl Önne SACO-S, Jan Herremo ST, and Ann-Britt Paradis or Leif Fröhlen SEKO. All can be reached via the switchboard number 0771-240 240.

Welcome with your application by February 9, 2025.

It is you as the applicant who must document and demonstrate your competence in a way that allows for an objective, qualitative assessment. You should also be aware that the application documents submitted to MSB are public documents, which means that anyone has the right to access them.