2. Cyber Defense Unit Seeks Threat Hunt Specialist

The Swedish Armed Forces (Försvarsmakten) is in an expansion phase and on a major growth journey. The Armed Forces' cyber defense is an integrated part of military defense and constitutes a military-strategic resource. Cyber defense has the capability to conduct offensive and defensive cyber operations as well as to detect, identify, and neutralize threats from the most sophisticated actors. The effects of a cyberattack can have consequences as severe for critical societal functions as a conventional armed attack. Do you want to protect Sweden and our right to live as we choose in a digitalized world? Attacks over the internet against computers and servers worldwide are increasing in scale. The effects of a cyberattack can have consequences as severe for critical societal functions as a conventional armed attack. The Armed Forces as an authority is in constant development, with our primary mission being to protect Sweden's inviolable freedom. We are prepared to do what is necessary, even in the most difficult times. 2. Cyber Defense Unit is therefore now seeking a specialist in threat hunting. If you have an analytical mindset and have worked for several years with hypothesis-driven hunting of adversaries who have gained access to IT systems, this could be the role for you. Main Responsibilities Within Cyber Defense, we always want to be at the forefront of innovation and through our actions contribute to a safer Sweden. In this role, you will have the opportunity to drive and develop cyber defense's capability for hypothesis-driven hunting. In the role, you will also contribute to the development of technical solutions to meet cyber defense's unique needs, which may include method, technology, and tool development. The tasks we face as a team must be solvable both in peace and in war, whereby physical training is a natural part of the work duties (the employer provides 3 hours per week of work time for physical training). As a threat hunt specialist, your role includes working with: Development of hypotheses to conduct proactive cybersecurity in designated IT systems. Development and refinement of detection methods adapted for TTPs of various adversaries. Implementation, administration, and improvement of methods for hypothesis-driven hunting. Mentoring of junior colleagues. Qualifications University degree in IT or equivalent knowledge deemed relevant by the employer. Documented work experience in a relevant field for at least 5 years. Category B driver's license. Meritorious Completed military basic training. Experience working with IT infrastructure, both in public and isolated environments. Experience in incident response work. Knowledge of and experience with CTI and detections. Knowledge of and experience working with NIST Special Publication 800-53. Well versed in MITRE ATT&CK. Skills within: Host-based forensics Network forensics Malware analysis Personal Qualities We see that you as an applicant have a high security awareness. We place great importance on qualities such as creativity and solution orientation. You are curious and keep yourself updated within your field of work. You work well in collaboration and value the strength of teamwork and working toward common goals. To thrive and be part of the team, you need to be unpretentious, have the drive to solve challenges with incomplete information, and to maintain Sweden's security. What We Offer You An important and stimulating job where you contribute to Sweden's security. Within the Armed Forces' cyber defense, you are offered continuous professional development so you can advance in your role and gain the conditions necessary for you to succeed in your mission. The work also includes continuous basic military capability, as our personnel hold combatant status. Those lacking military basic training will undergo the Armed Forces' general military training (AMU) to obtain a basic understanding of military operations and personal skills. A workplace characterized by strong community and a major focus on work-life balance. Other Requirements You should not tell other people (besides those directly concerned) that you have applied for a position at 2. Cyber Defense Unit. The reason we ask you to be discreet with this information is that there are positions at the unit that are covered by confidentiality. Employment with the Armed Forces requires Swedish citizenship. Employment entails national and international work obligations. The position has combatant status, which means you must be able to handle and use weapons. You will receive this training from us. A security clearance with record check will be conducted before employment. The selection process will be supplemented with occupational psychological tests. Employment Type: Permanent employment, 6-month probationary period applies if you are not currently employed by the Armed Forces Work Location: Linköping Start Date: By agreement For more information about the position, feel free to contact us at: [email protected] Welcome to submit your application by September 27. Your application must contain a CV and a cover letter describing how you meet our stated requirements. Submit your application to: [email protected], please include reference 22032 in your application. NOTE! The application instructions below are incorrect—use the email address above. Applications for this position will only be accepted through the Armed Forces' website. ----------------------------------------------------- Information about the recruiting unit: At Headquarters are the Supreme Commander and Director General. Headquarters has approximately 1,000 employees—both professional officers and civilian experts. As of January 1, 2023, Headquarters consists of the Defense Staff, the Operations Command, Military Intelligence and Security Service, and the Headquarters Staff Division and independent oversight units. Employment with us involves placement in a security classification. Swedish citizenship is typically required. A security clearance with record check will be conducted before employment in accordance with Chapter 3 of the Security Protection Act. Employment entails an obligation to be placed on war footing. Employment also includes an obligation to serve abroad. The scope of this varies depending on the type of position. A CV and cover letter must be attached to the employment application. If you advance in the hiring process, certified copies of grades and certificates must always be presented. Calls from external recruiting firms and salespeople are not welcome.

Ask AI

Common questions about this listing — opens your AI with a ready-made prompt including the listing link.

• Is the salary in this job offer competitive for the role and location?
  Open in
• What questions should I ask at the interview for this position?
  Open in
• Which skills should I highlight in my application for this job?
  Open in