Lediga job som Cybersäkerhetschef

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time

Länsstyrelsernas IT-avdelning växer för att möta Sveriges 21 länsstyrelsers breda och skiftande behov inom IT. Vi utvecklar och förvaltar verksamhetsspecifika appar, daglig IT för medarbetare, e-tjänster för invånare och företag – vi bidrar vi till ett demokratiskt, hållbart och säkert samhälle.

Här kan du till exempel jobba med IT-säkerhet, systemutveckling, verksamhetssystem, support, automation och integration. Vi har också en central roll i länsstyrelsernas position som högsta regionalt ansvariga myndighet för det civila försvaret. Var med och utveckla IT-tjänster som får samhällen, människor, djur, natur och kulturvärden att fungera - både idag och i framtiden!

Om jobbet

Gillar du utmaningen att ligga steget före hot och attacker? Vill du använda din säkerhetsexpertis för att skydda samhällsviktig IT? Då kanske du är vår nya  säkerhetsanalytiker!

Som säkerhetsanalytiker hos oss får du arbeta med att förbygga, förhindra, upptäcka, begränsa och utreda säkerhetsincidenter. Du har erfarenhet av SOC-arbete och kommer arbeta med att utveckla svar på nya hot och attackmönster. Du har också erfarenhet av att arbeta inom området DevSecOps och kan på olika sätt bidra till att utveckla det området, till exempel med penetrationstester. Du kommer ingå i länsstyrelsernas SOC och tillsammans med kompetenta och engagerade medarbetare på IT-avdelningen utveckla ny cyberförsvarsförmåga.

Exempel på arbetsuppgifter:

• Vidareutveckling av operativ säkerhetsförmåga
• Arbeta med sårbarhetsskanning och riskbedömningar
• Arbeta med logginsamling och analys av säkerhetshändelser
• Identifiera och utreda intrång och incidenter
• Bedöma prioritet och risk i ärenden och incidenter
• Bidra till att integrera säkerhet i utveckling och underhåll av system och applikationer
• Utforma och utföra penetrationstester
• Förvaltning av verktyg och system samt utveckla och förvalta integrationer mellan system
• Omvärldsbevakning inom området.

Vi utvecklar alltid vår verksamhet och du behöver därför vara öppen för att dina arbetsuppgifter även kan komma att förändras över tid.

Vad erbjuder vi dig?

Inom IT-avdelningen finns det goda utvecklingsmöjligheter inom många olika teknikområden. Du har möjlighet att specialisera dig, och ta ett större ansvar i de delar som du brinner extra mycket för, men även ha en bredd i ditt arbete. Du ingår i en väl sammanhållen arbetsgrupp med kompetenta och engagerade kollegor. Vi jobbar trots geografisk spridning inom landet mycket nära varandra med specialistkompetenser inom olika områden. Vi erbjuder ett flexibelt arbete med möjligheter till distansarbete del av arbetstiden. Resor inom landet förekommer.

Länsstyrelsernas IT-avdelning finns över hela landet. Placeringsort är Göteborg.

Om dig

Vi söker dig som är ansvarsfull, har ett flexibelt förhållningssätt och trivs med att rollen utvecklas över tid. Att arbeta mot gemensamma mål känns självklart för dig och du gillar att göra detta tillsammans med dina kollegor. Genom din goda samarbetsförmåga bidrar du till gemenskap i teamet, då du relaterar till andra människor på ett lyhört och smidigt sätt. Du bidrar också i gruppen med din analytiska förmåga.

För att trivas och lyckas i rollen ser vi även att du har lätt för att ta egna initiativ och har ett genuint driv att vilja lära och utvecklas i ditt arbete.

För oss är personliga egenskaper viktiga och vi ser det som självklart att du agerar utifrån Den statliga värdegrunden - Statskontoret och bidrar till ett gott arbetsklimat.

Du har:

• Högskoleutbildning inom IT-området eller motsvarande kunskaper/erfarenheter
• Erfarenhet från SOC-arbete eller liknande erfarenhet
• Bred erfarenhet inom säker systemutveckling (DevSecOps)
• Erfarenhet av olika metodiker och standarder inom systemutveckling och förvaltning
• Erfarenhet av penetrationstester av mjukvara, hårdvara eller nätverk
• Goda kunskaper inom IT-säkerhet med tillhörande processer.

Vi ser gärna att du har erfarenhet av:

• Nätverksdetektion, uppsättning och analys av nätverksloggar
• Utföra incidentanalyser av händelser i infrastruktur och klienter
• Arbetat med integrationer av system och tjänster
• Analys av skadlig kod, digital forensisk analys, intrångsdetektion och hotinformation.

Vi tror på allas lika möjligheter och ett av våra huvuduppdrag är att verka för mångfald och en personalsammansättning som speglar länens befolkning.

Välkommen med din ansökan!

Bra att veta

Läs mer om oss på vår webb Jobba på IT-avdelningen. Här finns information om våra förmåner. Vi finns också på Linkedin.

I den här rekryteringen vill vi inte att du bifogar något personligt brev. För att berätta om dina erfarenheter och förmågor får du i din ansökan svara på ett antal frågor. Detta är för att vi ska kunna ta ställning till i vilken omfattning din kompetens och dina förutsättningar matchar vårt behov. Ansökan ska vara på svenska då det är vårt arbetsspråk. 

Vi ställer höga krav på våra medarbetares säkerhetsmedvetenhet. Säkerhetsprövning enligt Säkerhetsskyddslagen (2018:585) kommer att genomföras innan vi fattar beslut om anställning. För en del anställningar kan därför svenskt medborgarskap komma att krävas. Läs mer om säkerhetsprövning Personalsäkerhet - Säkerhetspolisen (sakerhetspolisen.se).

Länsstyrelsen är en beredskapsmyndighet och har ett särskilt utpekat ansvar under kris och krig/höjd beredskap.

I den här rekryteringen arbetar vi med löpande urval. Det innebär att vi kan komma att kalla till intervju även innan sista dag för ansökning har passerat.

Anställningen kan komma att inledas med provanställning 6 månader.

Vi har valt rekryteringskanaler och vill inte bli kontaktade av rekryteringsföretag.

Om du har skyddade personuppgifter ska du inte registrera dig via vårt rekryteringssystem. Posta din ansökan till HR-enheten, Länsstyrelsen Västra Götaland, 403 40 Göteborg. Vid frågor, ta kontakt med rekryterande chef som står med i annonsen.

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

• Risk-assessing products and making sure actions are actually implemented, not just documented

• Owning and coordinating security work within development projects – being the person who holds the whole picture together

• Planning and running various types of security testing

• Mapping attack surfaces and building threat models for the products

• Reviewing source code with a security lens

• Contributing to system hardening, including image management for Windows environments

• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

• Being involved when security requirements are defined for new features

• Developing and implementing concrete security solutions, for both embedded systems and traditional applications

• Driving vulnerability management – from discovery to remediation

• Writing the documentation that's needed: architecture descriptions, processes, agreement materials

• Preparing development teams ahead of security reviews

• Keeping an eye on emerging threats, vulnerabilities, and security updates

• Reviewing how well suppliers live up to the security requirements set for them

• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware

• C / C++

• VHDL / Assembler

• Real-time operating systems (RTOS)

• C# / Java

• Windows environments and Windows-based applications

• Secure architecture and implementation

• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site

• Start: October 12, 2026

• Duration: through March 31, 2027

• Scope: Full-time