Cybersecurity Specialist – Secure IT Development in a Critical Societal Environment
Workplace: Stockholm, Sverige
Expires: September 14, 2025
Lead secure development efforts at Socialstyrelsen, impacting healthcare and social care across Sweden by combining technical expertise with strategic influence in a vital societal mission.
Main requirements:
  • Relevant education in IT/cybersecurity or equivalent work experience
  • Several years of current experience in IT/cybersecurity within complex IT environments
  • Experience investigating and handling security incidents
  • Good knowledge of log analysis and SIEM tools
  • Strong understanding of information security, vulnerability identification, and protection measures
  • Experience translating business requirements into secure technical solutions
  • Basic networking knowledge
  • Knowledge of identity security in local and cloud environments
  • Familiarity with security principles such as Segregation of Duties (SoD), Least Privilege, and Zero Trust
  • Familiarity with frameworks and standards like OWASP, NIST, MITRE ATT&CK, ISO 2700x
  • Proficiency in spoken and written Swedish and English
Responsibilities:
  • Shape and lead secure development practices at Socialstyrelsen
  • Drive and enhance work related to secure code, secure logins, cryptography, code review, and automated testing
  • Choose appropriate methods, tools, and technical solutions for the future
  • Provide guidance to developers from a cybersecurity perspective
  • Collaborate closely with IT specialists and business units
  • Write governance documents and define requirements
  • Conduct risk assessments, propose security measures, and manage incidents
  • Guide technical implementations in cybersecurity
  • Increase cybersecurity awareness across the organization and act as a bridge between technology and business
Required hard skills:
  • IT/cybersecurity education or equivalent experience
  • Experience in complex IT and cybersecurity environments
  • Log analysis and SIEM tools
  • Information security knowledge
  • Network fundamentals
  • Identity security locally and in cloud
  • Security principles: SoD, Least Privilege, Zero Trust
  • Familiarity with OWASP, NIST, MITRE ATT&CK, ISO 2700x
  • Incident investigation and handling
Recommended hard skills:
  • Certifications like OSCP, OSWE, CISSP, CEH or equivalent
  • Experience in DevSecOps and secure code review
  • Experience developing scripts and tools for security testing
  • Experience with Microsoft Sentinel
Soft skills:
  • Strong initiative and responsibility
  • Ability to identify tasks and propose solutions
  • Self-driven with good planning and structuring skills
  • Analytical thinking and problem decomposition
  • Clear written and oral communication
  • Ability to document work clearly and contribute to long-term structure and sustainability in cybersecurity work
Frameworks:
  • OWASP
  • NIST
  • MITRE ATT&CK
  • ISO 2700x
Natural languages:
  • Swedish (Proficient)
  • English (Proficient)
Cultural skills:
  • Collaboration between IT and business units
  • Balancing technical and strategic perspectives
  • Maintaining work-life balance
  • Working in a meaningful, societal-impact-driven environment