Sökresultat för "Application Security"

Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry. Assignment Description We are looking for an experienced Senior Application Security Coordinator What You Will Work On Coordinate remediation of findings from penetration tests and vulnerability assessments Manage and track security findings through their complete lifecycle Assess and prioritize vulnerabilities based on business risk Coordinate remediation activities across business and technical teams Work closely with application owners, infrastructure teams, and security stakeholders Establish and maintain governance, reporting, and remediation processes Monitor progress and ensure timely resolution of identified vulnerabilities Facilitate communication between multiple stakeholders Improve visibility and control of the organization's vulnerability landscape Support compliance with internal security standards and external regulatory requirements Drive continuous improvements in vulnerability management processes Ensure effective collaboration across cross-functional teams What You Bring Experience working with Jira Experience coordinating remediation of security findings Strong ability to assess risks and prioritize remediation activities Experience driving structured remediation and follow-up processes Good understanding of application security and infrastructure security Experience handling results from vulnerability scanning and penetration testing Knowledge of CVE, CWE, and CVSS Strong stakeholder management and communication skills Experience coordinating work across multiple technical and business teams Strong organizational and planning skills Experience with security governance and reporting Ability to work independently in complex environments Analytical, structured, and proactive approach to problem-solving

TL;DR We are seeking an Application Security Engineer to champion security across our entire development lifecycle. You’ll play a pivotal role in reviewing code, designing secure features, and mentoring engineers, ensuring security is at the heart of everything we build. If you’re passionate about application security, thrive on close collaboration with developers, and want to do the work of your life, this is your opportunity WHY LOVABLE? Lovable lets anyone and everyone build software with any language. From solopreneurs to Fortune 100 teams, millions of people use Lovable to transform raw ideas into real products - fast. We are at the forefront of a foundational shift in software creation, which means you have an unprecedented opportunity to change the way the digital world works. Lovable-built applications and websites are visited hundreds of millions of times a month, and our enterprise footprint is compounding fast. And we’re just getting started. We’re a small, talent-dense team building a generation-defining company from Stockholm. We value extreme ownership, high velocity, and low-ego collaboration. We seek out people who care deeply, ship fast, and are eager to make a dent in the world. WHAT YOU’LL BRING * 5+ years of experience in application security, securing cloud-native environments at product-focused tech companies, high-growth startups, or leading AI labs. * Strong programming and engineering skills. * Deep expertise in application security: secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management. * Strong background in securing engineering infrastructure: CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud platforms. * Hands-on experience collaborating with developers to design and implement security features and best practices. * Passion for educating and mentoring engineers on secure coding, vulnerability remediation, and emerging threats. * Systems mindset: comfortable reading and contributing to codebases, building security tooling, and integrating security into engineering workflows. * Bonus: Experience building internal security tools or contributing to open-source security projects. WHAT YOU’LL DO * Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities early. * Work closely with engineering teams to design and implement security features, provide actionable feedback, and ensure security is embedded in product development. * Lead security training, workshops, and 1:1 mentoring to upskill developers and foster a security-first culture. * Integrate SAST/DAST and supply chain security tools into our CI/CD pipelines for continuous, automated protection. * Detect, triage, and respond to application vulnerabilities and incidents, driving remediation and continuous improvement. * Monitor and address emerging risks in AI infrastructure, LLM pipelines, and third-party dependencies. * Secure the last piece of software. OUR TECH STACK * Frontend: React and Typescript * Backend: Golang and Rust * Cloud: Cloudflare, Google Cloud, AWS, Terraform * DevOps & Tooling: CI/CD pipelines, observability, infrastructure-as-code And always exploring what’s next. HOW TO APPLY * Please submit your application in English—our working language at Lovable. * We’re committed to fair and equal treatment for all candidates. If you’re interested, apply via our careers portal

Join our global force of 400+ innovators, blending the latest in tech with the greatest in soundtracking, from our Stockholm HQ to offices in London, New York, Los Angeles, Berlin, Paris, Oslo, and Seoul. We’re an industry leader with a startup mentality. We take what we do seriously, but we don’t take ourselves too seriously. Creating and collaborating to transform the sound of streaming, content, and culture. Come join us, and let the world feel your work. As a Security Engineer at Epidemic Sound, you will help keep the company safe across three connected surfaces: the products our customers use, the platform our engineers build on, and the systems our employees rely on every day. This is a broad, generalist role where your work directly shapes how an industry-leading company with a startup mentality manages risk and builds securely at scale. Building security automations and custom AI agents is a normal part of how the team operates, and you will be expected to do the same. You will sit within the Business Tech Division and report to the Head of Security, working closely with engineers, SRE, IT, Legal, and People teams across the organisation. YOUR KEY RESPONSIBILITIES INCLUDE * Own the vulnerability management programme across our products, cloud, and corporate estate: discovery, prioritisation, remediation tracking, and reporting. * Consolidate findings across our detection stack into a single risk picture. * Partner with software engineers to grow the Secure Software Development Lifecycle, including code reviews, threat models, and pre-ship security input. * Harden the GCP estate, Kubernetes platform, and CI/CD systems our engineers depend on. * Run vendor security reviews and respond to enterprise customer security questionnaires. * Operate and tune the Elastic SIEM and broader detection stack, building new detections as the threat picture evolves. * Respond to security incidents including on-call, and run training exercises to keep the team ready. * Build and run security agents and automations that other engineers and the wider business rely on, treating them as production-grade software. * Evaluate AI models and frameworks against security standards. REQUIREMENTS * Around five years in security engineering, with depth in at least one of application security, infrastructure security, enterprise security, or vulnerability management, and solid breadth across the others. * Hands-on experience running or contributing to a vulnerability management programme, including prioritisation, SLA setting, remediation tracking, and reporting. * Working knowledge of SCA/SAST tooling, Internal Developer Portals, and SIEM; we use Snyk, Port, and Elastic. * Working knowledge of the security features of the major public cloud providers, with GCP preferred. * Comfort with Kubernetes, Docker, or other container architectures. * Confident with at least one programming or scripting language such as Python, Go, or Bash. * Solid experience with Git, GitHub Actions, and Terraform. * Active, daily use of AI and agentic tools, with concrete examples of agents you have built and outputs you have shipped. * Experience with vendor security questionnaires. * Familiarity with common security frameworks such as PCI DSS and NIST. IT WOULD ALSO BE MUSIC TO OUR EARS IF YOU HAVE * Penetration testing background or OWASP Top 10 fluency. * Experience with CI/CD security hardening at scale. * A track record of building security tools other engineers want to use. * Experience reporting vulnerability management and security posture metrics to leadership. * Familiarity with social engineering attacks, especially phishing, and the controls that reduce them. Equal opportunity employer We believe that bringing people together from different backgrounds, experiences and perspectives makes for a healthy workplace, a more successful business and a better world. We value diversity and encourage everyone to come and soundtrack the world with us. Application Ready to make the world feel your work? Please apply, in English.

Summary of the Role: As Security Research Lead at Maze, your research directly shapes our products and how our AI understands real risk. This is a unique opportunity to join a well-funded Series A startup building at the intersection of generative AI and cybersecurity, leading the research function that makes our products sharper than anything else on the market — and gives Maze a credible technical voice in the security community. You'll set the bar for our vulnerability research: defining the methodologies that separate critical risk from noise, validating and contextualising the threats our AI surfaces, and feeding that expertise straight into product and engineering to improve how we detect, prioritise, and remediate. You'll work hand-in-hand with our AI/ML, product, and engineering teams — close to the roadmap and the code, not off to one side — turning what you find into capabilities that crush the competition. Alongside that, you'll amplify the work externally: surfacing novel vulnerabilities and building research narratives that earn real reach, giving Maze technical credibility with practitioners and customers. This role is perfect for a security researcher with real depth in cloud and application security who is ready to step up: someone who wants their research to ship as product, can lead a small research team, and can tell a story that lands with a technical audience. The ideal candidate has done this inside another security vendor and wants to build both great products and a research brand from a strong foundation. What you'll work on: * Make Our Products Brilliant: Feed research directly into product and engineering — work close to the roadmap and the codebase to sharpen how we detect, prioritise, and remediate, building capabilities that outclass the competition * Shape How Our AI Understands Risk: Translate deep threat research into the labels, signals, and product feedback that train our models to prioritise vulnerabilities like a seasoned researcher * Lead Our Security Research Function: Set the direction, standards, and methodologies for how Maze researches, validates, and prioritises cloud and application security threats, scaling a small team of researchers as we grow * Find Novel Vulnerabilities That Get Reach: Surface original research and build narratives — blog posts, technical talks, podcasts, video, conference presentations — that earn real reach and give Maze technical credibility with the security community * Build Authoritative Technical Intelligence: Produce detailed research on exploitation techniques, attack vectors, and remediation across cloud infrastructure and application security, enriched with CVE, advisory, and threat-intel sources * Set the Standard for Research Quality: Establish the frameworks and review processes that keep our vulnerability assessment consistent, defensible, and ahead of the threat landscape * Grow the Bench: Mentor and develop researchers, raising the technical bar of the team and creating a research culture others want to join What You Need to Be Successful: * Proven Security Research Depth:** 6+ years in hands-on security research, with a strong track record investigating complex vulnerabilities, building proof-of-concepts, and validating real-world threats * Cloud & Application Security Expertise: Deep knowledge of cloud (AWS) and application security vulnerabilities, attack vectors, and how they actually get exploited at scale * Research That Ships as Product: A track record of turning research into product and engineering outcomes — working closely with eng, product, and ML teams to translate findings into shipped capabilities, not reports that sit on a shelf * A Public Track Record: Demonstrated ability to be the voice of security research externally — published research, conference talks, well-received technical content, or a recognised presence in the community * Vendor-Grade Perspective: Direct experience inside a security tooling or research organisation, with a view on what good research operations look like and how to build credibility in market * Technical Investigation Skills: Strong coding and scripting (Python, Go, or similar) for automating research, building validation tooling, and creating PoCs * Communication That Lands: Ability to translate complex security research for technical practitioners, customers, and internal AI/ML and product teams without losing rigour * Leadership Instinct: Experience leading or mentoring researchers, setting standards, and owning a domain end-to-end in a fast-moving environment * Startup Readiness: Comfortable operating with ambiguity and limited structure, prioritising ruthlessly, and building the function as you run it * Nice to haves: * Experience with AI/ML security or working with AI-generated security findings * An established personal brand or following in the security research community * Open-source contributions to security tools or research * Experience setting up or scaling a research/labeling operation * Industry certifications (OSCP, AWS Security, CISSP, etc.) Why Join Us: * Ambitious Challenge: We're using generative AI (LLMs and agents) to solve some of the most pressing challenges in cloud and application security. You'll define how AI understands and prioritises vulnerabilities — and how the market talks about it. * Expert Team: We are a team of hands-on leaders with experience in Big Tech and Scale-ups, who have been part of the leadership teams behind multiple acquisitions and an IPO. * Build Products and a Research Brand: A rare chance to build a security research function from a strong foundation where your research ships as product — directly shaping what we build and how Maze is seen in the security community. * Impactful Work: Cybersecurity is a force for good. Your research will directly improve how thousands of organisations understand and respond to threats, scaling expert security knowledge through AI. * Build an AI-native Company: Join early enough to shape everything from the ground up, with significant equity upside and the room to grow into senior security leadership.

Summary of the Role: As Security Engineer (Internal) at Maze, you'll own how we secure ourselves — our cloud, our applications, and the way our engineers build. This is a unique opportunity to join a well-funded Series A startup building at the intersection of generative AI and cybersecurity, establishing the internal security foundation that lets a three-product company keep moving fast as it scales. You'll take hands-on ownership of cloud infrastructure security, application security, security tooling, and the compliance work that unlocks enterprise deals. We're deliberately looking for a strong generalist rather than a narrow specialist: someone who can harden our AWS environment and identity model, get into the weeds on application security, and run a pragmatic compliance program — and who knows when a control is worth the friction and when it isn't. Your success will be measured by the robustness of our security posture, our readiness for enterprise customer requirements, and your ability to make secure the default path for engineering rather than a blocker. This role is perfect for a pragmatic, broad security engineer who has built and run security at a startup, thrives with autonomy, and wants to own a domain end-to-end. You'll be our founding internal security hire — but not a lone wolf for long: this is the first role in a function we expect to grow, and as we scale we'll add to the team and bring in dedicated security leadership. You'll set the foundations the rest of that team is built on, and have a clear runway to grow alongside it. YOUR CONTRIBUTIONS TO OUR JOURNEY: * Harden Our Cloud Infrastructure: Secure our AWS environment by design — identity and access management, hardening, network and infrastructure-as-code controls (Terraform) — closing real risk rather than chasing checkboxes * Own Application Security: Embed application security into how we build, from secure-by-default patterns and code review guidance to triaging and driving down vulnerabilities across our own products and services * Build Security Tooling and Monitoring: Stand up the monitoring, logging, and alerting that gives us visibility across infrastructure and applications, and serve as our first line of defence * Run Compliance Pragmatically: Lead readiness for SOC2, ISO27001, and similar frameworks — building the controls, documentation, and evidence that support enterprise sales without drowning the team in process * Establish Security Policies That Enable: Create practical security policies and procedures that keep standards high while letting the team move quickly — no security theatre * Automate Security Operations: Build security automation and tooling in code, using AI-assisted workflows to ship faster while keeping quality high * Manage Vendor and Supply-Chain Security: Assess third-party vendors and tools so our supply chain meets enterprise expectations * Enable Incident Response: Develop incident response plans and runbooks, and establish clear processes for detecting, responding to, and recovering from security incidents WHAT YOU NEED TO BE SUCCESSFUL: * Broad, Hands-On Security Engineering: 5+ years building and running security, with genuine breadth across cloud security and application security rather than depth in only one — comfortable being the person who covers the whole surface area * AWS Security Expertise: Deep, hands-on knowledge of AWS security — IAM, hardening, and AWS-native security tooling — with the judgement to prioritise what matters * Application Security Capability: Real experience finding and fixing application-layer vulnerabilities, and embedding secure development practices into engineering workflows * Infrastructure as Code Proficiency: Strong experience managing security controls programmatically with Terraform, building secure, scalable infrastructure through code * Coding and Scripting Skills: Proficiency in Python, Bash, or similar for security automation, custom tooling, and integrating security into development workflows * Compliance and GRC Know-How: Practical experience translating SOC2, ISO27001, or similar requirements into technical controls — without letting process become the product * Pragmatic Security Mindset: A track record of balancing security rigour with business velocity, implementing controls that enable engineering rather than block it * Startup Self-Direction: Proven ability to operate autonomously as an early security hire, prioritise ruthlessly, and build without extensive oversight — and to thrive in the ambiguity of an early-stage company * Foundation-Setter: Mindset to build security in a way others can build on as the team grows — clear documentation, repeatable processes, and standards a future team and security leadership inherit cleanly * Nice to haves: * Experience building security programs at early-stage startups (seed through Series B) * Background in DevOps or SRE that grew into security engineering * Familiarity with container security (Docker, Kubernetes) * Experience at a cybersecurity product company * A bias toward building vs buying security tooling under startup constraints * AI-assisted security workflow experience WHY JOIN US: * Ambitious Challenge: We're building at the intersection of generative AI (LLMs and agents) and cybersecurity — and you'll secure the company doing it, across cloud and application security. * Build Security from Zero: Own the internal security function from day one, establishing the architecture, tooling, and practices that scale Maze through hypergrowth — then help grow the team and function around you as we scale. * Expert Team: Work alongside a CTO and engineering team with deep experience in AI and cybersecurity — hands-on leaders who have been part of multiple acquisitions and an IPO — giving you strong technical partnership while you own security. * Impactful Work: Cybersecurity is a force for good. Your work directly enables AI-powered security solutions that protect organisations worldwide — making security an enabler of innovation, not a blocker. * Build an AI-native Company: Join early enough to design everything from the ground up, with significant equity upside and a clear path to grow as our security organisation matures.

Are you passionate about ethical hacking and eager to develop the skills that keep modern applications safe? Do you dream of finding the weaknesses others miss — and helping organisations fix them before attackers do? If so, we have the perfect opportunity for you! ABOUT THE INTERNSHIP Our Application Security & Penetration Testing Internship is designed for ambitious individuals who want to explore the exciting world of offensive security and gain hands-on experience. This program offers the chance to work on real client engagements, learn industry-standard testing methodologies, and collaborate with experienced security consultants. WHAT YOU'LL LEARN As an intern, you will: Test modern web applications, APIs and mobile apps for real security weaknesses. Learn how professional penetration tests are planned, executed and reported. Turn technical findings into clear, practical advice that clients can act on. Gain hands-on experience with the tools and methodologies used on live engagements. This internship is designed for individuals eager to dive deep into application security and apply their curiosity to problems that matter. Every vulnerability you help find and every report you help write makes a real system secure and safer for the people who depend on it. WHY JOIN US? Hands-on experience with state-of-the-art security tools and technologies. Guidance and mentorship from seasoned penetration testers. Opportunity to work on real-world client engagements that make an impact. A collaborative and supportive environment where questions are always welcome. WHO WE'RE LOOKING FOR We welcome interns who: Have a strong interest in cybersecurity and ethical hacking. Have a solid grasp of web technologies, networking, and Linux or Windows OS. You don't need to be an expert, but we expect you to be very comfortable working in these environments. Good knowledge of mobile app development (iOS/Android) and APIs. Good knowledge of any major cloud technologies/platforms (AWS/Azure/GCP). Have some awareness of common application vulnerabilities, such as the OWASP Top 10. Exposure to web application penetration testing, API security testing, or mobile application security through academic projects or self-learning. Have tried their hand at CTFs or practice labs such as Hack The Box, TryHackMe or PortSwigger Web Security Academy, or personal projects or home labs. Good programming/scripting experience, for example, Python or Bash, is a bonus. Strong analytical and problem-solving skills with the ability to think creatively, eager to learn and solve complex problems. Are ready to contribute ideas and collaborate with a dynamic team. Approach security work with care, discretion and a strong ethical mindset. HOW TO APPLY Send your resume and a cover letter explaining why you're excited about penetration testing and why you are an ideal candidate for the role. It is recommended to include any personal security projects, CTF write-ups or lab platform profiles you have worked on. Applications are open until 31st August 2026. Don't miss this chance to kickstart your career in offensive security! Join us, and let's build a safer digital world together! Please note: This is an unpaid, full-time, 6-month onsite internship starting September 2026 at our offices in Lindholmen, Gothenburg.

HiQ i Göteborg växer inom cybersäkerhet och vi söker dig som vill hjälpa våra kunder att göra digitala produkter säkrare. Vi har ett starkt team i Stockholm och teamet i Göteborg är under uppbyggnad. Det är där du kommer in! Som lead inom produktsäkerhet kommer du att stötta i rekrytering samt utveckla affären tillsammans med lokala säljare och konsultchefer. Samtidigt kommer du som konsult själv att hjälpa våra kunder att bygga in säkerhet i sina produkter och system från början. Du jobbar nära utvecklingsteam, gör riskanalyser och threat modeling, tar fram säkerhetsarkitektur och hjälper kunderna att tolka regelverk och standarder i praktiken. Vi söker dig som: * har minst 5 års erfarenhet inom t.ex. Cybersecurity, Application Security, OT/Embedded Security eller System-/Produktsäkerhet. * har affärsförståelse och kunskap om marknaden och du har gärna tidigare erfarenhet från konsultbranschen. * har goda kunskaper inom produktutveckling och utveckling av inbyggd programvara tex i C/C++ eller modellbaserad utveckling. * har vana att arbeta nära utveckling eller produktutveckling. * har erfarenhet och/eller ett intresse av ledarskap och vill vara med på resan att bygga upp teamet i Göteborg! * talar och skriver svenska obehindrat. Meriterande: * Goda kunskaper inom Embedded systems. * Programmering i python eller java. * IoT-säkerhet, system security eller ICS/industriella system. * Erfarenhet av kryptografi och/eller säkra kommunikationsprotokoll. * Erfarenhet av någon cybersäkerhetsstandard eller ramverk för säker utveckling. Som person gillar du att förstå hur saker fungerar “under huven”, trivs i samarbeten och är trygg i dialogen både med utvecklare och beslutsfattare. Du delar gärna med dig av din kunskap och är nyfiken på att lära av andra. Det här är en fantastisk möjlighet att vara med och bygga upp en cybersäkerhetsverksamhet på ett av Sveriges mest tekniktunga och spännande konsultbolag! Om HiQ: Att vara HiQare är både utmanande och omväxlande. Vi är alla konsulter vilket innebär att vi i våra projekt hos kund eller in-house får prova nytt och bli exponerad för nya branscher, arbetsplatser och tech-stacks. Variationen är stor och utvecklingstakten snabb. Hos oss får du bidra och bemästra dina starkaste kompetenser, men även utforska och utveckla nya. Med rätt attityd och kompetens bidrar du med värde både i ditt uppdrag och till dina kollegor på HiQ.    Hos oss hittar du allt från marknadens vassaste utvecklare, testare och hackers, till projektledare, agila coacher och designers. Även om våra kompetenser är många och olika så har vi mycket gemensamt – vi tycker om att driva utveckling, att förbättra och förenkla... och framför allt – att ha kul på vägen!    HiQ är kulturdrivet, inte regelstyrt, och det gör att man kan vara sig själv till 100%. En följd av det är att man som HiQ:are tar sitt jobb seriöst, men inte alltid sig själva :) Det som genomsyrar oss all är viljan och ambitionen att bidra till att göra världen lite bättre med hjälp av teknik och kommunikationslösningar som förenklar människors liv. På riktigt.  Vi ser fram emot din ansökan<3

Är du en utvecklare med passion för att bygga säkra lösningar? Säkerhet har aldrig varit viktigare för oss och våra kunder! Nu söker vi dig som tillsammans med oss vill ta på sig ledartröjan i säker systemutveckling! Säkerhet måste byggas från grunden och vi har ambitionen att leda arbetet från start till mål! Vi tror följande beskrivning passar in på dig: * Förstår vikten av att beakta risk tidigt i utvecklingsprocessen genom att delta i eller leda workshops i hotmodellering * Har kunskap om tekniska verktyg för automatisering och säkerhetstestning, tex. Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) * Har kunskap och praktisk erfarenhet att använda OWASP som guide och ramverk för säker utveckling * Har erfarenhet eller intresse av penetrationstestning och sårbarhetsskanning * Älskar att dela med dig av din kunskap till övriga i teamet * Kommunicerar flytande i svenska och engelska i tal och skrift HiQ då? Vi gillar att bygga saker. Man kan skriva mycket om att förbättra världen och saker som att “forma framtiden genom skapandet av produkter som engagerar, förundrar och som användare blir förälskade i"… men i slutändan handlar det om en sak: Det är svårt att slå känslan av att skapa något som gör nytta, som gör någons vardag bättre än vad den var igår. Hos oss kommer du ha möjlighet att bygga saker för både stora och små kunder och projekt. Så oavsett om du drömmer om att vara med och skapa stora projekt som når en bred publik, eller om du brinner för att bygga små specialiserade lösningar så kommer du hitta sådana möjligheter hos oss. Dessutom så är det viktigt för oss att “Bygga företaget du alltid velat jobba på”. HiQ har en väldigt flexibel företagskultur, även mellan våra olika kontor. Vi är en produkt av individerna som jobbar här och är stolta över att vara en arbetsplats där man känner att man kan vara sig själv.

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations. All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation. Your Role – Cluster Digital Security Officer (Cluster North) As a Cluster Digital Security Officer, you will support the technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division-level security priorities. This is a hands-on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi-country and multi-layer (Cluster–Division–Group) environment. Key Responsibilities Security Coordination & Team Collaboration (Cluster & Division) Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution Contribute actively to the Digital Security community, including sharing practices related to application and platform security Provide regular, transparent, and data-driven reporting on risk posture, control effectiveness, and remediation progress Technical Security Oversight (Infrastructure & Applications) Monitor and assess the security posture of platforms, infrastructure, and applications (on-prem and cloud) Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10) Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications Track and assess third-party and supplier risks, including risks related to applications and integrations Risk, Compliance & Assurance Identify and track gaps against security policies, standards, and mandates, including application security requirements Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams Securitas Alarm Monitoring Centers (SOC) Security In addition to Cluster responsibilities, you will contribute to Division-level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas. This includes: Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access) Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows Supporting incident detection, response readiness, and recovery capabilities for SOC-related platforms and applications Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments Ideal Candidate Profile We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills. Certifications (mandatory) CISSP or CISM or equivalent Experience & Knowledge 5–7 years of experience in Cyber Security, Information Security or Application Security Minimum of 2 years of experience in IT operations Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security) Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations Good understanding of ISO 27001 standard Experience with risk management, audits, or compliance activities Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications Technical & Analytical Skills Ability to assess security posture across infrastructure and applications and identify control gaps Comfortable working with security metrics, reports, and risk data Understanding of incident detection and response processes, including those impacting applications Ability to translate security requirements into practical and implementable actions across infrastructure and application teams

At HiQ, every challenge is an invitation to explore new possibilities. We’re looking for someone who thrives on the thrill of discovery, who sees every system as a puzzle waiting to be solved, and who finds energy in the pursuit of safer, smarter digital solutions. As part of our Pentest team, you’ll be at the heart of our mission to build secure applications and environments for some of the most exciting organizations in the Nordics. Your days will be filled with hands-on penetration testing, creative problem-solving, and the freedom to dive deep into the latest tools and techniques. Whether you’re orchestrating a Red Team engagement or probing the intricacies of cloud security, you’ll have the autonomy to shape your own approach, while always knowing that a team of passionate experts has your back. You’ll work with Burp Suite, Nmap, Wireshark, and a host of other tools, sometimes in the cloud, sometimes on-prem, always at the cutting edge. Your experience with Active Directory and scripting will come to life as you navigate complex environments, uncover vulnerabilities, and help our clients see their systems through a new lens. If you’ve cracked hashes, explored mobile app security, or sharpened your skills in CTFs, you’ll find plenty of opportunities to push your expertise even further. WHAT YOU BRING * At least 5 years of practical experience in penetration testing or Red Team operations * Deep familiarity with industry-standard tools such as Burp Suite, Nmap, and Wireshark * Strong background in assessing and securing web applications * Proven experience performing Active Directory and broader network security assessments * Understanding of modern cloud platforms and architectures * Scripting skills that enable you to automate workflows and develop new solutions * Relevant education and/or certifications (e.g., OSCP, OSCE, AWS/Azure Security) * Excellent communication skills, with the ability to clearly document and articulate vulnerabilities and recommendations * Swedish citizenship, as HiQ carries out security-classified assignments that may require it BONUS SKILLS * Experience with hash cracking * Knowledge of mobile application security * Knowledge in cloud security * Networking know-how * Capture the Flag participation * Insights into computer forensics Here, learning is woven into the fabric of every project. Whether you’re pursuing new certifications, experimenting with the latest exploits, or sharing insights with colleagues, you’ll find endless room to grow. We celebrate curiosity and initiative, if you spot an opportunity to make something better, you’ll have the freedom and support to make it happen. You’ll be trusted to run penetration tests independently, but you’ll never be alone. Collaboration is second nature here: ideas bounce, knowledge flows, and everyone’s voice matters. You’ll document your findings with clarity, communicate risks with empathy, and help guide clients toward stronger, more resilient solutions. If you’re ready to join a team where your passion for security is matched only by your drive to learn and create, we’d love to meet you. Ready to take the next step? Apply now and let’s build something extraordinary together.

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations. All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation. Your Role – Cluster Digital Security Officer (Cluster North) As a Cluster Digital Security Officer, you will support the technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division-level security priorities. This is a hands-on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi-country and multi-layer (Cluster–Division–Group) environment. ---------------------------------------------------------------------------------------------------------------------------------- Key Responsibilities Security Coordination & Team Collaboration (Cluster & Division) * Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives * Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications * Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution * Contribute actively to the Digital Security community, including sharing practices related to application and platform security * Provide regular, transparent, and data-driven reporting on risk posture, control effectiveness, and remediation progress Technical Security Oversight (Infrastructure & Applications) * Monitor and assess the security posture of platforms, infrastructure, and applications (on-prem and cloud) * Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security * Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10) * Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications * Track and assess third-party and supplier risks, including risks related to applications and integrations Risk, Compliance & Assurance * Identify and track gaps against security policies, standards, and mandates, including application security requirements * Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments * Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams Securitas Alarm Monitoring Centers (SOC) Security In addition to Cluster responsibilities, you will contribute to Division-level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas. This includes: * Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications * Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access) * Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows * Supporting incident detection, response readiness, and recovery capabilities for SOC-related platforms and applications * Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments ---------------------------------------------------------------------------------------------------------------------------------- Ideal Candidate Profile We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills. Certifications (mandatory) * CISSP or CISM or equivalent Experience & Knowledge * 5–7 years of experience in Cyber Security, Information Security or Application Security * Minimum of 2 years of experience in IT operations * Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security) * Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations * Good understanding of ISO 27001 standard * Experience with risk management, audits, or compliance activities * Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications Technical & Analytical Skills * Ability to assess security posture across infrastructure and applications and identify control gaps * Comfortable working with security metrics, reports, and risk data * Understanding of incident detection and response processes, including those impacting applications * Ability to translate security requirements into practical and implementable actions across infrastructure and application teams

Om företaget Hos Avaron får du tryggheten i en fast anställning kombinerat med variationen av att arbeta ute hos olika kunder. Vi tillsätter specialister inom allt från teknik, IT och industri till projektledning och affärsstöd – och oavsett uppdrag har du en konsultchef som finns där för dig och din utveckling. Om rollen Du kliver in i ett avgränsat men viktigt tekniskt arbete där en verksamhetskritisk applikation behöver anpassas inför en migrering från SQL Server 2016 till en ny databasinstans. För att lösningen ska fungera smidigt vid installation och samtidigt bli säkrare behöver både paketering och autentisering ses över. Fokus ligger på att ta fram ett uppdaterat MSI-paket som automatiskt pekar applikationen mot rätt databasinstans samt att ersätta dagens hantering av inloggningsuppgifter i klartext med en säkrare anslutningslösning. Det här är en roll för dig som gillar tydliga tekniska problem, praktiska förbättringar och lösningar som ger direkt effekt i drift och förvaltning. ArbetsuppgifterDu bygger ett nytt MSI-paket för applikationen som pekar mot den nya databasinstansen. Du ser till att applikationen kan installeras eller ominstalleras utan manuell konfiguration av databasinställningar. Du analyserar nuvarande lösning där funktionskonto lagras i konfigurationsfiler och tar fram en säkrare hantering. Du implementerar en lösning där applikationen ansluter till databasen med den inloggade användarens autentiseringsuppgifter. Du bidrar i migreringen från SQL Server 2016 genom att anpassa applikationens koppling mot den nya databasinstansen. Du hjälper till att säkerställa att den färdiga lösningen fungerar stabilt vid installation och i fortsatt användning. KravDu har tidigare erfarenhet av att bygga nya MSI-paket för applikationer som pekar mot nya databasinstanser. Du har tidigare erfarenhet av att förbättra säkerhet från hårdkodade inloggningsuppgifter till anslutning via databas med autentiseringsuppgifter. Du har tidigare erfarenhet av migrering från SQL Server 2016. Du har tidigare erfarenhet av MSI-paket som automatiskt konfigurerar applikation mot databasinstans. Du kommunicerar obehindrat på svenska. Vi erbjuderFast anställning hos Avaron AB Tjänstepension Friskvårdsbidrag på 5 000 kr per år Ansökan Vi tillsätter löpande – sök gärna så snart du kan.

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE ENGINEERING ARCHITECT TEAM The Architecture team is a small group of very senior engineers reporting to our VP of Engineering Excellence, working broadly across the organization in collaboration with Engineering, Product, and Security.  We partner deeply with other Engineering teams for large projects, and provide direction and architectural guidance for smaller initiatives.  We have a dual-pronged charter to “level up the tech stack and level up the people stack” via both technical contributions and partnerships/mentoring. In this role, you will have the opportunity to significantly contribute to Auth0’s future technology direction.  Through your experience, knowledge of industry trends, and technical abilities you will provide guidance, build proof of concepts, and deliver production software implementations that help Auth0 Engineering teams move faster by using and developing standard patterns and technologies. You will also help advance the engineering culture and help uplevel other engineers. Note that while this role involves a lot of guidance, documentation, and leadership, it also requires substantial hands-on coding and development of both applications and systems.   WHAT YOU’LL BE DOING * You will collaborate with Product, Security, and Engineering teams to define and continually improve Auth0’s technology stack and architecture. * Foster and lead innovation in the IAM space, with a strong focus on Agentic Identity * Lead initiatives to enhance, scale, and evolve Auth0’s product offerings. * Embed within Engineering teams across the organization for large projects, while providing guidance and lighter touch engagements for smaller initiatives. * Design, architect, and document large scale distributed systems. * Lead the development of complex, broadly-scoped functionality in a very large and deep set of services and components. * Teach by doing: coding, optimizing, and troubleshooting Node.js and Go applications in collaboration with feature development teams. * Implement features and create consistent foundations using technologies such as AWS, Azure, Node.js, Go, MongoDB, Redis, PostgreSQL, Kubernetes. * Investigate, understand, and resolve bottlenecks in our ability to scale, use resources efficiently, and maintain a 99.99% uptime SLA. * Drive technical decision making while striving to find the right balance between factors such as simplicity, flexibility, reliability, cost, and performance. * Participate in “round table” discussions and mentor team members and engineers throughout the organization to level up our people. * Participate in our Engineering Leadership Team with other architects, directors, and executives. * You will join our Incident Commander on-call rotation. Members of our team do periodic on-call rotation for high-severity incidents to help up-level our responses After spending time getting acquainted with our applications, systems, and processes, and getting training to  WHAT YOU’LL BRING TO THE ROLE * Passion and thorough understanding of what it takes to build and operate secure, reliable systems at scale. * Knowledge of Identity Protocols such as OAuth, OIDC and SAML. * Industry knowledge of the Authorization and Authentication spaces. * Experience in building AI Agents, and/or MCP servers applications.  * Experience with security engineering and application security. * Very strong written and verbal communication skills with a demonstrated ability to adjust your communication style to the intended audience, whether communicating with senior executives, customers, engineers, or product managers. * Mastery and deep understanding of hands-on software development building distributed systems. * Experience with API-first applications using REST and/or gRPC. * Experience with multi-cloud environments and container deployments, particularly Kubernetes in AWS/Azure. * Prior experience with application performance management, tracing, and performance testing tools. * Excellence at creating clarity and alignment for technical initiatives.  * Great ability to build trust through collaboration with multiple teams and get consensus on a vision. * Knowledge of application security and cloud security best practices. * 10+ years of software development experience. * 5+ years of experience working on cloud applications. And extra credit if you have experience in any of the following! - Deep experience in Node.js (Javascript or Typescript), or Golang. #LI-Hybrid (P-3286_3209115)   Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.    The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $244,000—$330,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

RaySearch develops innovative software solutions to improve cancer care. About 1000 clinics in more than 40 countries use RaySearch software to improve treatments and quality of life for patients. RaySearch was founded in 2000 and is listed on Nasdaq Stockholm. The headquarters is located in Stockholm, with subsidiaries in the US, Europe and Asia - Pacific. Today we are more than 400 employees with a common vision of improving cancer care with innovative software. Our great staff is crucial for our success and we offer a fantastic working environment in modern offices, flexibility and good opportunities for development. We believe in equal opportunities, value diversity and work actively to prevent discrimination. We are looking for a System Developer who can blend software development expertise with a strong interest in security. In this role, you’ll contribute directly to RaySearch’s mission: advancing cancer treatment through innovative software. By ensuring that our products are designed and implemented securely, you help protect both patients and healthcare professionals and strengthen the reliability of the tools they depend on. About the role As a System Developer within cybersecurity, you will play a key role in shaping our secure development practices. You will work closely with development teams to embed security into the software development lifecycle and ensure that our products follow industry-leading standards. The role combines hands-on application security work—such as secure code reviews, threat modeling, and penetration testing—with knowledge sharing, training, and collaborative support to help teams make informed security decisions. This is an ideal role for a developer who enjoys cybersecurity and wants to contribute by guiding others, elevating security awareness, and helping teams work securely and effectively together. Your main tasks Work with development teams to implement application security best practices throughout the SDLC. Participate in threat modeling (e.g., STRIDE) and risk assessments for new and existing applications. Assist in designing and implementing cybersecurity controls in products. Ensure compliance with cybersecurity frameworks and standards. Contribute to developer security awareness training and promote secure development practices. Perform secure code reviews, static/dynamic analysis, and penetration testing. Develop and maintain secure coding guidelines and security documentation. Support the preparation of cybersecurity documentation for regulated products (including FDA-related frameworks). Your profile You are a developer with a strong interest in cybersecurity and secure design. You enjoy sharing knowledge, collaborating with others, and supporting development teams in building secure solutions. You communicate clearly, work constructively across functions, and contribute to a culture where security is a natural part of everyday development. Required skills Strong understanding of software development practices and the ability to read, analyze, and evaluate code for security and quality aspects.  Strong understanding of application security principles (e.g., OWASP Top 10, secure coding). Experience with threat modeling and risk analysis. Excellent ability to produce clear, structured security and compliance documentation. It’s an advantage, but not required, if you also have experience of: Working in regulated environments (e.g., medical devices, embedded systems). Hands-on experience with security testing tools (e.g., SonarQube, Burp Suite). Familiarity with FDA cybersecurity guidelines, the IEC 8100x series, or IEC 62443 for industrial/embedded systems. Integrating security into CI/CD pipelines (Azure DevOps or GitHub Actions). Our Culture Culture at RaySearch is the driving force behind our organization, where everything we do is driven by a shared passion for innovation and the fight against cancer. Our dedication is reflected in our ability to deliver exceptional results, pay close attention to detail, and consistently go the extra mile. Our employees stand out as experts in their field, driven by a relentless focus on solving problems - no matter how complex. At RaySearch, we take pride in leading the way in cancer treatment, leveraging cutting-edge technology to develop innovative solutions that make a real difference in patient care. Our Offer At RaySearch, we offer a diverse and inclusive work environment, fostering openness, sincerity, and collaboration. Located in Hagastaden, Stockholm's Life Science Hub, our modern and creative workspace includes an in-house gym, yoga, and social activities like ping pong, table football, and regular after-work events. Our bistro serves a fantastic lunch buffet, and we offer morning- and afternoon-fika every day. Our rooftop terrace also provides a stunning 360-degree view of Stockholm, enhancing the work experience. All of this comes attached with a competitive compensation and benefits package. Application Please apply to the position through the application form below. Selection and interviews will be ongoing. We do not accept applications by e-mail.

Professional Galaxy is an IT and technology consulting company that provides highly specialized expertise within IT, software development, SAP, purchasing, electronics and mechanical design. We collaborate with experienced senior experts and deliver strategic value-creating expertise to some of Sweden's most complex and analytically demanding projects. Our focus is always on high quality, professionalism and clear, measurable results. We are now seeking a Senior Project Manager – Information Security & AI for one of our clients. About the assignment: On behalf of our client, we are looking for an experienced Senior Project Manager with expertise in Information Security and AI. In this role, you will lead strategic security initiatives within a global organization where business, IT, and Information Security work closely together. Your focus will be on driving projects that strengthen security controls, reduce risk, and ensure that security requirements are embedded in both business processes and technical solutions. You will work in an international environment with multiple stakeholders and be responsible for delivering projects on time, within scope, and with high quality. Key Responsibilities - Lead complex Information Security projects with a focus on AI. - Plan, coordinate, and manage projects throughout the entire project lifecycle. - Coordinate cross-functional teams across Business, IT, and Information Security. - Act as the primary link between business stakeholders, project sponsors, and technical teams. - Identify, manage, and escalate project risks while ensuring delivery against agreed timelines, scope, and quality. - Facilitate project meetings and provide regular status reporting to steering committees and key stakeholders. - Support the implementation and integration of security controls into business processes and technical solutions. Qualifications We are looking for someone who has: - At least five years of experience leading complex projects within international organizations. - Proven experience managing cross-functional and geographically distributed project teams. - Experience delivering Information Security or other security-related IT projects. - Solid technical understanding of IT, such as networking or infrastructure. - General knowledge of AI and its application within Information Security. - Strong project planning, coordination, and organizational skills. - Excellent communication skills with the ability to engage both technical and non-technical stakeholders. - Fluency in English, both written and spoken. Meritorious Experience - Project Management certification such as PMP or IPMA. - Experience within Cyber Security. - Experience supporting governance initiatives, policy implementation, or audit preparation. - Experience with AI-related Information Security initiatives. - Fluency in Swedish and English Who You Are You are a confident and structured project manager who thrives in complex, international environments. You build trust quickly, communicate effectively with stakeholders at all levels, and have a collaborative, solution-oriented mindset. You are comfortable managing changing priorities while maintaining focus on successful project delivery. This is an exciting opportunity to contribute to high-impact initiatives at the intersection of Information Security, AI, and business transformation within a global organization. Are you the right person for the assignment, or do you want to recommend a strong candidate? Do not hesitate to contact us. Please apply directly through our system with: - Your updated CV in english - Availability to start the assignment In the motivation, describe why you are suitable for this assignment - refer to previous consulting assignments, employmxent, education and personal qualities. Please note: We do not accept any applications through mail. All applications have to be sent through the portal to be valid. Offer continuously: Please note that for this role we offer continuously. That means that we sometimes remove the assignments before the deadline. If you are interested, we recommend that you apply immediately.

About the role The objective of this position is to strengthen the team’s capacity to develop and apply data-driven and systems-based approaches across water, coastal and marine domains – including federated data systems, decision-support tools and geospatial analysis – while contributing to project leadership and new funding opportunities. The researcher will work across the team’s three pillars and multiple projects, bringing methodological coherence to data-intensive work and reducing dependence on the team lead for analytical coordination. About the team The Water, Coasts and Ocean Team works across three thematic pillars: Resilient Infrastructures, One Water and Blue Economy. Across these pillars, the team addresses increasingly complex challenges involving data integration, cross-sectoral cooperation and digital decision-support – from freshwater systems and coastal resilience to offshore infrastructure and critical national services. Several funded projects now require integrated capacity in data (systems, modelling and governance). Recruiting a researcher with strong expertise in data systems is a strategic priority for delivery, proposal development and analytical leadership. Key responsibilities Lead and contribute to data systems work: integration, interoperability, security and application in decision-support tools across sectors Apply and promote FAIR data principles (Findability, Accessibility, Interoperability, Reusability) and related standards in project data management Develop and implement digital and data-driven approaches for infrastructure risk assessment, resilience planning and coastal and marine management Contribute to SAFEWIN’s development of federated learning approaches for cross-sectoral data cooperation in sensitive infrastructure contexts Contribute to KRAFT’s analysis of data management challenges and cascading risks across critical infrastructure systems Engage with Swedish and international stakeholders, including public agencies, research partners and practitioners Translate complex data and modelling outputs into policy-relevant insights, project reports, publications and stakeholder-facing materials Contribute to proposal development and fundraising for new projects Support project coordination and supervision of junior researchers where relevant What we are looking for We do not expect candidates to have expertise across all areas listed. We are particularly interested in candidates with strong foundations in either data systems and digital methods or the governance and application of digital tools, combined with a demonstrated ability to work across disciplinary and sectoral boundaries. Experience in or genuine interest in water, coastal, marine or critical infrastructure contexts is valued but not required. Essential PhD in data science, environmental informatics, computer science, infrastructure systems or a related field; candidates without a PhD must demonstrate equivalent independent research experience, including a track record of securing funding Strong experience with data integration, modelling, spatial analysis or the development of digital decision-support tools Experience eliciting user requirements and translating them into analytical methods, digital tools or decision-support products Experience working with data from complex, multi-sectoral or infrastructure-related contexts Working proficiency in at least one programming or scripting language (e.g. Python, R) for data analysis or tool development Ability to lead analytical work packages within interdisciplinary research projects Familiarity with data governance, metadata standards, interoperability frameworks and data architectures supporting the sharing and use of data across organizations or sectors Experience contributing to or leading research funding proposals, with a track record of securing funds at a scale commensurate with career stage Strong publication record or equivalent output in applied research settings Excellent written and oral communication skills in English Desirable Experience with federated learning, privacy-preserving computation or cross-sectoral data governance Familiarity with GIS and geospatial data tools Background in or demonstrable familiarity with critical infrastructure systems, offshore energy, marine monitoring or defence-adjacent data environments Working proficiency in Swedish Who you are This is a cross-cutting role open to candidates at mid- or senior-researcher level. Both levels are genuinely considered; the appointment will reflect the experience and profile of the successful candidate. The ideal candidate at either level combines technical depth in data systems with the ability to engage meaningfully with governance, policy and stakeholder dimensions – and to translate between these registers. The role sits at the technical–policy interface that characterizes SEI’s comparative advantage. We are not looking for a pure engineer or a pure policy analyst, but someone who understands data systems well enough to make credible technical contributions and is intellectually curious about the institutional, political and governance dimensions of how data is managed and shared in complex settings. Mid-level researcher – A mid-level researcher will have demonstrated the ability to work independently on analytical and data-intensive tasks within research projects. They will have some experience contributing to funding proposals and may have secured smaller grants or project components, though not necessarily in a leading role. They may have worked within teams or independently without formal management responsibilities, and will have an emerging publication record or equivalent demonstrated output in applied research settings. Senior researcher – A senior researcher will have a demonstrated track record of independently mobilizing research or innovation funding, including having led funding applications, not only participated in teams led by others. They will have successfully secured funds both for their own work and to support others, and will have held leadership positions with responsibility for more junior staff. They will have built a recognized area of work, evidenced through a sustained publication record, a portfolio of funded projects or equivalent standing in applied or policy research communities.