Cybersecurity Analyst to NCSC-SE

Försvarets Radioanstalt · Full-time

Box 301, Bromma, Sweden

1 position(s). Do you want to make a difference for society and strengthen Sweden's collective ability to handle cyber threats? The National Cybersecurity Center, NCSC, is now seeking a Cybersecurity Analyst to help build up the center's operations at FRA. If you're the person we're looking for, we can offer varied work in a knowledge-intensive environment where you get to make a difference every day. Your Assignment As a Cybersecurity Analyst, you'll work at NCSC and in the office for operational and technical cybersecurity. The office is responsible for operational cybersecurity in support of society by preventing, detecting, and supporting the coordination and management of IT incidents. The office's mission includes developing comprehensive situational pictures of adversarial cyber threats and IT incidents, providing technical advice and support to private and public actors, and maintaining a national situational awareness. In your daily work, you have significant independent responsibility and many contact points in a dynamic, operational environment where priorities can change quickly. Work tasks are normally carried out during office hours, but the role also includes on-call duty, which means other working hours may occur during IT security events. You'll participate in both national and international exercises and work in a mix of independent tasks and teamwork. As part of the teamwork, you'll work in the operational group, where you contribute to supporting society with IT security-related events. Your main responsibilities include: - Actively monitor developments in your environment, assess threats and risks, and develop decision-making materials and situational pictures for various recipients - Gather, evaluate, and analyze information from multiple sources - Compile and write intelligence reports, situational pictures, and threat assessments - Work within and contribute to the development of NCSC-SE's CTI process - Adapt content for target audience – from technical reports to strategic briefings for management - Translate technical information into clear, operationally relevant conclusions - Take responsibility for visual and linguistic presentation of analysis products - Represent NCSC in collaboration with external partners and stakeholders, both nationally and internationally - Act as a bridge between CTI analysts, operations, and external partners, with a focus on communication, collaboration, and information sharing You Can We're looking for you who have: - Relevant university education (e.g., IT, cybersecurity, social sciences, or communication) or equivalent work experience - Experience with qualified analysis or communication work (e.g., as an analyst, journalist, writer, or investigation leader) - Experience working with established analysis models, methods, or frameworks - Experience developing decision-making materials, reports, and situational pictures - Experience managing and developing relationships with internal and external stakeholders - Experience communicating analyses and complex information to different target audiences - Experience translating technical analysis into operationally relevant information and acting as a contact point between technical specialists and audiences without technical backgrounds - Very good ability to express yourself orally and in writing in Swedish and English We consider it advantageous if you have: - Relevant certifications in IT security, CTI, or intelligence analysis - Understanding of the cyber threat landscape, including different types of threat actors, their motives, and attack methods - Experience with investigative and/or audit work - Previous experience from CERT/CSIRT operations - Understanding of models and principles for information sharing, such as the Traffic Light Protocol (TLP) - Experience with cyber threat intelligence (CTI), cybersecurity analysis, or intelligence work You Are We're looking for you with the following qualities: - Collaboration skills – You work well with other people and relate to them in a responsive and flexible way. You listen, communicate, and resolve conflicts constructively - Relationship building – You're outgoing and socially active in professional contexts. You create contacts and maintain relationships - Flexible – You easily adapt your perspective and approach when circumstances change. When facing change, you see opportunities - Problem-solving analytical ability – You work well with complex issues by analyzing and breaking down problems into smaller parts. You see patterns and solutions that others might miss More Information The workplace is currently located in Tomteboda, Solna. Within a few years, new premises will be ready in Bergshamra. Swedish citizenship is a requirement as employment at FRA involves placement in a security classification. A requirement for employment is a passed security clearance with register check. The security clearance will be conducted in accordance with the provisions of the Security Protection Act. Employment entails an obligation for civil defense placement. We apply a six-month probationary period. For more information, you're welcome to contact Daniel Tourde at telephone 010-382 80 46. Union representatives can be reached at 010-557 46 00. We accept applications via www.fra.se no later than 2026-10-04. Reference number 2026FRA1362-2. As we have already decided on the recruitment channels we wish to use for this recruitment, we ask not to be contacted with further offers of advertising and recruitment assistance. Keywords: Cybersecurity Analyst, Cyber Threat Intelligence (CTI), Cybersecurity Analyst, Threat Intelligence, Intelligence Analyst Employment type: Permanent employment. Duration: Permanent. Working hours: Daytime.