What does CSN do?

We have one of the world's most generous study support systems. Thanks to this opportunity, everyone in Sweden can study, regardless of background. With us, you can contribute your skills and knowledge to the benefit of society and our important mission to make studies possible.

What do we offer?

As an employee at CSN, you should be able to combine work with leisure and have a good balance in life. We offer you flexible working hours, the possibility of remote work, and generous benefits.

CSN is in constant development, and so are all of us who work here. To achieve the best results, we act and lead with trust as our approach. We are located from Kiruna in the north to Lund in the south, with our headquarters in Sundsvall. Do you also want to become one of us and contribute to the CSN team?

Do you dream of a meaningful role?

At the IT department, a lot of exciting development work is underway, with several major reforms that combine the renewal of technology, processes, and skills.

In our system development, we use, to mention a few - distributed microservice architecture, container platform, Java, JavaScript frameworks, MQ, and SpringBoot.

We work with both custom-developed and standard systems, and right now we are building a completely new system support for the Transition Study Support.

Based on the needs of the organization, you plan and manage your own daily work. You work in teams where we have high trust in each other's abilities, learn from each other, and solve challenges together. Competence development is important to us, and here you will meet some IT colleagues who will share their development journey!

About the position

Do you want to strengthen the security of critical IT services while contributing to stable and robust operations every day? As an IT security specialist within IT operations at CSN, you will be an important reinforcement of our operations team, which acts as a hub in IT production and is responsible for ensuring that our services are available, secure, and reliable.

In this role, you will work in operational operations and operate across several technical platforms, including Linux and container-based environments. You will collaborate with colleagues in IT, IT security, and the organization to ensure that incidents and requests are handled in a structured manner and that operational and security aspects are integrated into daily work.

You will combine operational tasks with security monitoring and incident analysis, where you assess security alarms, analyze logs, and contribute to well-founded actions and escalations. At the same time, you will participate in developing and improving log management, alarm structure, and working methods to strengthen both security and availability.

With us, you will have the opportunity to stabilize, improve, and further develop both technology and working methods – in a social team with a high ceiling that values collaboration, knowledge sharing, and shared responsibility for quality and security.

Your tasks

You will work to ensure stable and robust operations by carrying out deployments and changes, monitoring services and infrastructure, and responding to alarms and deviations. With the support of logs and measurement data, you will identify risks, prevent errors, and contribute to high availability. You will manage incidents and requests, restore services, and document events and actions according to our ITIL processes (usually incident and request).

A crucial part of the role is security monitoring in production, where you assess and analyze security alarms, determine the need for action or escalation, and collaborate with IT security and SOC as needed. You will ensure that security logs are collected in the central logging platform, analyze and manage logs and dashboards, and further develop structures and working methods to strengthen security.

You will also contribute to raising the operations team's competence in security monitoring and incident management through knowledge sharing and the development of common working methods.

CSN's IT operations team is staffed during daytime on all working days of the year. The position also involves work and on-call duty outside regular working hours.

Qualifications

We are looking for someone who has:

• post-secondary education with an IT focus (YH or college/university) or equivalent competence acquired through work experience that the employer deems relevant,
• current multi-year experience in handling security alarms in production (analysis, triage, classification, action/escalation) and/or working in SIEM in production environments with high security requirements,
• current experience in operations, monitoring, and application management in larger and complex production environments, primarily within Linux and container platforms (e.g., Kubernetes/OpenShift) with Java applications,
• very good skills in spoken and written Swedish,
• good skills in spoken and written English.

It is advantageous if you have:

• relevant education and/or certification in IT security,
• current experience in central log management in production with the collection of application, infrastructure, and security logs, normalization/mapping (e.g., CIM), retention, access/permission control, and management of dashboards and alarms,
• current experience in managing complex relationships between IT infrastructure, business processes, and systems in public operations with high demands on information security, preferably with experience from an IT environment similar to CSN's,
• current experience working based on ITIL processes,
• current experience in scripting and automation for operational tasks (e.g., Bash, Python, PowerShell, Ansible) with version control (e.g., Git).

To succeed in the role of IT security specialist focused on IT operations, we are looking for someone who is social, enjoys solving problems, can keep a cool head when things happen, and works collaboratively with others in a responsive and unpretentious manner. You are structured and meticulous, follow routines, and document what you do, so that operations remain stable, safe, and secure even under pressure.

We place great importance on your personal suitability.

Application deadline

2026-03-08

Start date

By agreement

Location

Sundsvall

Employment form

Permanent employment, a probationary period may apply

Extent

Full-time

Reference

HR/2026:1

Other

Documents in employment matters at a public authority are public documents.

Read more about our recruitment process.

Read about how to apply if you have protected personal information.

This is how we handle your personal data.

We decline all offers of recruitment and advertising assistance.

Warm welcome with your application!