1st Line SOC Analyst

Vattenfall AB · Full-time

Östhammar, Sweden

Company Description Vattenfall is one of Europe's largest producers and retailers of electricity and heat. Our main markets are Sweden, Germany, the Netherlands, Denmark, and the United Kingdom. The Vattenfall Group has approximately 21,000 employees. We have electrified industries, delivered energy to homes, and transformed society through innovation for over a hundred years. About the Role Would you like to become our IT security specialist and work to secure our IT landscape? IT security is becoming increasingly important within Vattenfall and society at large. Our highly protected assets are spread across several European countries, while digitalization is developing rapidly. Cyber threats and local security requirements make our work both challenging and interesting. As a 1st Line SOC Analyst, you will work in a team of IT security experts. We monitor and analyze information to protect the organization from threats. Your responsibilities will include: Monitoring and analyzing alerts in our SIEM platform, Ensuring that all incidents, alerts, and anomalies are handled according to established processes and procedures. Escalating events to a 2nd Line Security Analyst. Responsible for the SOC's work instructions and ensuring these are regularly reviewed and updated. Maintaining consistency in security concepts, tools, and best practices. The majority of your work will be conducted from the office. The role's working hours vary and include day, evening, and night shifts. Job Requirements We are looking for a structured and ambitious person who is not afraid to ask critical questions and who constantly strives for improvements. The role requires you to have a holistic perspective, enjoy collaborating with many different stakeholders, and be able to communicate clearly and professionally, both verbally and in writing, with colleagues at various levels in the organization. We would like you to have: At least one year of experience in IT, or equivalent relevant education. Meritorious Experience in assessing vulnerabilities, threats, and security incidents. Knowledge of security scanners, SIEM systems, monitoring, intrusion detection systems, and incident management. Knowledge and experience in threat intelligence. Additional Information Beyond having the opportunity to shape the future's smart energy society, we offer you a developmental and varied role with many points of contact. At Vattenfall, we believe that work and private life should have a good balance, so we offer flexibility in work and the possibility to work from home if needed. We also offer a range of other employee benefits such as reduced working hours, favorable occupational pension agreements, parental leave supplements, and more. Read more about our benefits here. Work Location Ringhals, Solna, Forsmark For more information about the position, please contact recruiting manager Joel Franzen, [email protected]. For questions about the recruitment process, please contact recruiter Julia Norberg, [email protected]. Trade union representatives via Vattenfall's switchboard, 08 739 50 00. Sofi Wadström (Akademikerna), Patricia Ek (Unionen), Christer Gustafsson (Ledarna), Juha Siipilehto (SEKO). We welcome your application by 2026-09-13. Selection and interviews will take place after the application deadline. We only accept applications through our website. We do not accept cover letters in applications. You can apply quickly and easily by answering selection questions and attaching your CV. At Vattenfall, we value being active, positive, open, and security-conscious. We seek employees who share our vision and can help strengthen our corporate culture. We are convinced that diversity contributes to building a more profitable and attractive company and strive to be good role models when it comes to diversity. Vattenfall actively works to ensure that all employees have equal opportunities and rights regardless of age, ethnic or cultural background, gender identity, religion/belief, sexual orientation, or functional variation. Read more about how we work with diversity and inclusion here. Since the security of Vattenfall and its employees is critical, we will conduct a "pre-employment screening" before each hire. These checks are based on the role you will fulfill at Vattenfall. Working at Vattenfall means working with infrastructure critical to society. Therefore, many of our positions are security-classified and you may be subject to war placement. If this position is security-classified, a security vetting will be conducted before employment, in accordance with the security protection act. Any war placement will be made with the support of the employment agreement and the law on total defense duty. We look forward to your application!