Cybersecurity Analyst – Detection Engineering

Stack

Responsibilities

• ▹Develop and improve detection rules and use cases
• ▹Identify gaps in existing detection capabilities
• ▹Analyze incidents and translate lessons learned into improved detections
• ▹Work with SIEM, EDR and XDR platforms
• ▹Collaborate closely with SOC, Incident Response and Threat Hunting teams
• ▹Contribute to the development of automated security capabilities

Nice to have

• ▹Experience in penetration testing, threat hunting, incident response, digital forensics, SOC analysis or purple team work

Soft skills

What we offer

• ▹Relevant onboarding and continuous professional development
• ▹Work with socially critical systems and real threats
• ▹Flexibility with up to two days of remote work per week
• ▹Mostly daytime working hours
• ▹Highly skilled, engaged colleagues

About the company

Trafikverket's CERT team protects Sweden's critical transport infrastructure against cyber threats.