IT & OT Security Coordinator

Do you want to work with OT security and help build a safer digital society? Then we have the job for you. At Orange Cyberdefense, we lead the effort to secure the OT environments that keep the world running—from energy and water to manufacturing, transportation, and process industries. You will become part of an established OT team where we share knowledge, grow together, and help drive the industry forward. What will you do? As a Senior OT Security Consultant, you will work closely with our customers, often directly within their OT environments. Assignments are both national and international, meaning travel and on-site customer presence are a natural part of the role—often for several consecutive days during project execution phases. Your responsibilities will include: - Trusted OT Security Advisor Act as a long-term, trusted advisor to our customers on strategic and operational security matters. You will help them understand their threat and risk landscape, prioritize security initiatives, and make informed decisions that balance security, operational requirements, and regulatory obligations such as NIS2 and standards including IEC 62443. - On-Site OT Security Assessments Lead and perform in-depth security, risk, and vulnerability assessments at customer sites. This includes: Architecture and network reviews based on the Purdue Model Asset and data flow mapping Evaluation of network segmentation and remote access solutions Interviews with operations and maintenance personnel Gap analyses against relevant frameworks and standards Development of risk-based, prioritized remediation roadmaps that customers can execute - Participation in Customer Cybersecurity Projects Provide OT security expertise within customer-led initiatives, including network segmentation projects, secure remote access implementations, OT SOC establishment, IDS/asset discovery deployments, and compliance programs related to NIS2 and IEC 62443. Depending on project needs, you will alternate between the roles of advisor, reviewer, and hands-on technical specialist. - Project Management and Delivery Drive engagements from scoping through delivery, lead cross-functional teams, and ensure high quality in both technical execution and documentation. You are comfortable presenting findings and recommendations to audiences ranging from technical specialists to executive leadership teams. - Service Development Contribute to the continuous development of our OT services and methodologies, evaluate new tools and technologies, and share knowledge internally across the team. Who are you? - Experience in OT/ICS security, or extensive experience in industrial automation with multiple years focused on cybersecurity. Previous experience in a consulting or advisory role is highly valued. - - OT and Automation Expertise, for example SCADA, DCS, and PLC systems, including how they are operated, maintained, and secured. You are well-versed in the Purdue Model and understand the operational requirements of industrial environments. - Security and Framework Knowledge - Assessment Experience. Experience leading or conducting on-site OT security assessments, from planning and data collection through reporting and remediation recommendations. - Certifications. Relevant certifications are considered an advantage, such as GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent. Who are you? You are self-driven, solution-oriented, and business-minded. You take ownership, are confident in customer-facing situations, and have the ability to build long-term trusted relationships. Who are Orange Cyberdefense? Orange Cyberdefense is Sweden's leading cybersecurity company. Our vision is to contribute to a safer digital society by combating cybercrime in all its forms. We employ approximately 3,000 people globally, including 400 in Sweden. At Orange Cyberdefense, we are all different but united by the same passion—and that is our greatest strength. We are proud of our individual differences, experiences, and stories, and we believe that true inclusion is essential to delivering solutions that protect everyone. Therefore, we ensure that all applications are treated equally and fairly. Why work with us? - Meaningful Assignments - A Strong OT Team - Continuous Development - Modern Toolset - Flexible Work Environment - Innovative Culture What will happen next? Apply through this job advertisement. Recruitment is conducted on an ongoing basis. If you have any questions, you are welcome to contact the responsible recruiter. As assignments may involve security-classified activities, a security clearance process in accordance with the Swedish Security Protection Act is included as part of the recruitment process. Öppen för alla Vi fokuserar på din kompetens, inte dina övriga förutsättningar. Vi är öppna för att anpassa rollen eller arbetsplatsen efter dina behov.

As a Security Analyst, you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work, you will have access to a range of SIEM, SOAR, and XDR platforms. In this role, you will proactively and reactively defend our customers against cyberattacks. In addition, you will be involved in a growing Operational Technology (OT) security area, where your responsibilities will include monitoring and analyzing security alerts from OT environments. Key Responsibilities Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel). Manage solutions that provide customers with visibility into their OT environments, including presenting findings and leading continuous improvement initiatives. Analyze and mitigate threats using EDR and XDR platforms. Act as a Technical Delivery Manager for assigned customers, serving as their primary technical point of contact, delivering monthly reports, and maintaining customer environments. Independently evaluate security events and determine appropriate response actions. Document incident timelines and investigation findings. Advise customers on security incidents and recommended remediation actions. Perform proactive threat hunting. Develop and refine detection rules. Improve existing processes and design new operational procedures. Contribute to our internal threat intelligence database and indicators of compromise (IOCs). Continuously expand your technical expertise through training and professional development. Configure, manage, and maintain log management platforms (Splunk and Microsoft Sentinel). Deploy infrastructure and install components for new customer environments. Provide customer support, onboarding, and troubleshooting for SIEM solutions. Why Join Orange Cyberdefense? Become part of one of the cybersecurity industry's leading organizations, working with market-leading technologies. Join a collaborative, low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the company's direction. Work in an environment that values curiosity, autonomy, knowledge sharing, and continuous learning. Help secure major international organizations against evolving cyber threats. Benefit from excellent opportunities for professional development and specialization. About Orange Cyberdefense Orange Cyberdefense is Sweden's leading cybersecurity company, with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services, ranging from highly technical solutions such as Security Operations Centers (SOC), firewall solutions, technical threat intelligence, vulnerability management, and SIEM, to governance, risk management, and security strategy consulting. We are a global team of approximately 3,000 colleagues, including 400 employees in Sweden. At Orange Cyberdefense, diversity is one of our greatest strengths. We believe that different backgrounds, experiences, and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process. Who We Are Looking For We are looking for someone with post-secondary education or professional experience in cybersecurity, digital forensics, or network security. Previous experience in a similar Security Analyst role is considered an advantage. As a person, you are courageous, curious, and trustworthy. You build confidence with customers, contribute to the company's success, and collaborate effectively with colleagues. You are able to gather and assess information, distinguish critical details from noise, build a comprehensive understanding of security events, and communicate your findings clearly to both technical and non-technical audiences. We value curiosity, creativity, independence, and initiative even more than complete expertise. For this particular team, you will work with public sector customers, meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English, spoken and written, is also required.