← Back to list
Job

Cybersecurity Analyst – Detection Engineering

Other • Remote • Full-time Sweden Sweden

Trafikverket's CERT team is looking for a cybersecurity analyst focused on Detection Engineering, turning knowledge of attacker techniques into effective detections and automation.

Responsibilities

  • Develop and improve detection rules and use cases
  • Identify gaps in existing detection capabilities
  • Analyze incidents and translate lessons learned into improved detections
  • Work with SIEM, EDR and XDR platforms
  • Collaborate closely with SOC, Incident Response and Threat Hunting teams
  • Contribute to the development of automated security capabilities

Nice to have

  • Experience in penetration testing, threat hunting, incident response, digital forensics, SOC analysis or purple team work

Soft skills

Strong analytical ability and pattern recognitionCuriosity and willingness to keep learningTrustworthy, humble collaboration styleStructured, well-documented way of workingProactive, initiative-driven attitudeTeam-player mindset

What we offer

  • Relevant onboarding and continuous professional development
  • Work with socially critical systems and real threats
  • Flexibility with up to two days of remote work per week
  • Mostly daytime working hours
  • Highly skilled, engaged colleagues

About the company

Trafikverket's CERT team protects Sweden's critical transport infrastructure against cyber threats.

Similar jobs