About the Position
As a SIEM Expert, you will be responsible for operating, managing, and developing Svenska kraftnät's SIEM solution for security monitoring. You will contribute to strengthening security in one of Sweden's most critical societal operations by developing and improving security monitoring in a complex IT and OT environment.
You will operate and maintain the security monitoring platform Splunk and work closely with platform users within the Security Operations Center (SOC) and the IT operations organization. The role includes Splunk cluster configuration and management, Linux administration, and platform content development.
The position involves:
Operating, managing, and developing Svenska kraftnät's SIEM solution for security monitoring.
Developing new features in the SIEM solution.
Developing and managing data models in the SIEM platform.
Meeting SOC analysts' needs through close dialogue and collaboration.
Performing operational and administrative tasks in the SIEM system.
Working with IT operations to onboard new IT systems to the SIEM platform.
Being part of Svenska kraftnät's team for handling IT security incidents.
As an IT Security Specialist
With us, you have the opportunity to develop your IT security expertise in an organization with high security requirements. The role offers significant opportunities for personal development and continuous competency advancement. You will work alongside experienced colleagues, share knowledge both internally and with external partners in the industry and government sector, and contribute to the ongoing development of Svenska kraftnät's security monitoring.
You will be placed in the Operational IT Security unit, which is part of the IT Security Department. Here you will work in a team of approximately 20 technical IT security specialists who together are responsible for maintaining, developing, and improving Svenska kraftnät's security platform. You will work with systems spanning both IT and OT environments in a critical societal operation.
About You
Required Qualifications:
Personal Qualities:
We are looking for someone who is collaborative, analytical, structured, and solution-oriented. You enjoy working with others and have an organized approach that helps you analyze complex technical environments and find sustainable solutions.
You should also live up to the values outlined at https://www.statskontoret.se/forvaltningskultur/den-statliga-vardegrunden/
In this recruitment, we place great emphasis on your personal qualities.
Education:
You have an academic degree in IT or equivalent competence acquired in another way that Svenska kraftnät deems equivalent.
You also have:
Good experience with SIEM solution implementation/operations (minimum 1 year of professional experience)
Experience working with distributed solutions (e.g., cluster solutions, collectors, indexers, GUI)
Knowledge of regular expressions and scripting in, for example, Python, Bash, PowerShell
Good experience working in Linux (RHEL/CentOS)
Good experience managing systems using automation languages (e.g., Ansible)
Strong ability to express yourself in both Swedish and English, orally and in writing
Meriting Qualifications:
Good experience with data onboarding from various systems/products and data normalization
Experience building advanced alerts, reports, and visualizations
Experience working in a Security Operations Center (SOC)
Experience with Splunk and Splunk Enterprise Security
Relevant SIEM solution training and certifications
Experience with security work in ICS and SCADA systems
Experience with IT and information security work in larger organizations
Good to Know
The position is based in Stockholm/Sundbyberg.
Opportunity for remote work up to 50% #LI-hybrid.
Deadline for applications is September 9, 2026. We use selection questions instead of a cover letter. Please attach your CV in Swedish where you clearly describe the experience we are looking for.
This is a permanent position.
https://www.svk.se/jobba-har/var-arbetsplats/formaner/
In this recruitment, we are collaborating with Experis. For more information, please contact recruitment consultant Carina Eyoma, phone: 0730862275 or email: [email protected].
Due to vacation periods, response times may be longer than usual.
Contacts at Svenska kraftnät:
Carl Isaksson, Recruitment Specialist, 010 489 20 28
Annika Ingeborn, SACO, 010 475 87 72
Erica Midfjäll, ST, 010 475 87 31
You can also reach us via email: [email protected]
https://www.svk.se/jobba-har/
We do not welcome direct contact from staffing and recruitment firms or salespeople in connection with recruitment. We have procurement agreements that apply to Svenska kraftnät as a state authority.
Additional Information
We place high demands on our employees' security and confidentiality awareness. Prior to employment, a security vetting will be conducted in accordance with the Security Protection Act (2018:585), which includes a basic investigation and, if the position is classified as a security class position, the vetting will also include a records check. Employment at Svenska kraftnät may require Swedish citizenship for certain positions. Employment includes an obligation to be placed on the wartime roster. For more information on personnel security at Svenska kraftnät, see https://www.svk.se/sakerhet-och-beredskap/sakerhetsskydd/personalsakerhetAbout the Position
As a SIEM Expert, you will be responsible for operating, managing, and developing Svenska kraftnät's SIEM solution for security monitoring. You will contribute to strengthening security in one of Sweden's most critical societal operations by developing and improving security monitoring in a complex IT and OT environment.
You will operate and maintain the security monitoring platform Splunk and work closely with platform users within the Security Operations Center (SOC) and the IT operations organization. The role includes Splunk cluster configuration and management, Linux…