IT Security Technician to FRA's SOC

Försvarets Radioanstalt · plný úvazek

Box 301, Bromma, Švédsko

1 position(s). Do you want to make a positive impact on society and contribute to Sweden's independence in the world? FRA is seeking quality-conscious employees for our internal security function. At FRA, every task is part of something larger. If you're the person we're looking for, we can offer you varied work in a knowledge-intensive environment where you get to make a difference every day. Your Assignment As an IT Security Technician, you will be part of FRA's security office. The security office's task is to ensure FRA's security protection for the agency's various operations based on their specific conditions. In your role as IT Security Technician, you will ensure FRA's own security protection for the agency's various operations based on their specific conditions. We are seeking several people, and you will work either with on-premises solutions or cloud services. You will, among other things: Handle log analysis within the Security Operations Center (SOC) Process incident cases Conduct various types of investigations in the IT security field Handle inquiries and participate as an expert in internal IT security work You will be part of a team where you work both independently and together with colleagues who have similar tasks in the security office. Beyond collaboration within the security office, the position involves many contact points both internally within the agency and externally, primarily with other government agencies. To thrive in the role, we see that you are security-conscious and driven by staying current with technological developments. You Can We are looking for someone who has: Upper secondary education (gymnasium) Basic technical knowledge of operating large IT environments, IT and network technology, and IT security work, which can be acquired through studies or relevant work experience Good understanding of identity and access management in Microsoft environments, for example Active Directory or Microsoft Entra ID Good knowledge of attack methodologies and established frameworks, such as MITRE ATT&CK Knowledge and experience in, for example, PowerShell, Python, Bash, JavaScript Good skills in Swedish and English, both spoken and written We consider the following as merits: Post-secondary education in systems science, Cyber/IT security, or similar Experience of independently leading and driving incident investigations. From detection and escalation to remediation, reporting, and follow-up. Experience with log analysis and alerting in SIEM or equivalent analysis tools, such as Microsoft Sentinel, Splunk, or QRadar. Documented experience with operational cybersecurity work, preferably from SOC, CERT, CSIRT, or similar environment. Experience working in or with security-sensitive operations In-depth knowledge of on-premises Active Directory, such as hardening, administrative models (tiering), GPO security, Kerberos, etc. – or – Knowledge and experience of Microsoft Azure and Microsoft 365 from a security perspective (Entra ID, Defender XDR, Sentinel), preferably also other cloud platforms such as AWS or GCP Experience with security audits and/or penetration testing as well as IT forensics work Experience with development in modern IT environments Experience with managing large IT environments It is also a merit if you have previously completed any of FRA's CTF challenges. If you haven't done so before, you can find them at challenge.fra.se. You Are We are looking for someone with the following characteristics: Collaboration Skills – Works well with other people. Relates to them in a responsive and flexible manner. Listens, communicates, and resolves conflicts constructively. Initiative – Takes initiative, starts activities, and achieves results. Rule-Conscious – Places great importance on and acts in accordance with decisions made, rules, and guidelines. Addresses concerns and criticism constructively. Structured – Plans, organizes, and prioritizes work efficiently. Sets and keeps to deadlines. About FRA FRA has the world around us as our arena, where every task is part of something larger. In one way or another, you as an employee get to contribute to protecting Sweden's integrity and independence in the world. You are making a real difference, every day. Our mission as an intelligence service is to protect Sweden against the most serious threats facing society – military attacks, terrorism, and cyberattacks. We protect what is most important to us – our security, our democracy, and our way of life. We are experts in the cyber field and signals intelligence as well as an early warning system for military threats. Since 2024, FRA has led the National Cyber Security Center, NCSC, whose mission is to develop and strengthen Sweden's ability to prevent, detect, and handle cyber threats. As a new employee at FRA, you will receive comprehensive introductory training and continuous professional development, which gives you the opportunity to develop your skills and become even better at what you are passionate about. Our organization is multifaceted and consists of different competencies and personalities, where each individual has unique qualities and circumstances. We strive to create an environment where everyone feels welcome and secure. In addition to a stimulating work environment, we also offer an attractive benefits package, which you can read more about at www.fra.se. For more information about the National Cyber Security Center, visit www.ncsc.se For your security. For our democracy. Every day. Year-round. More Information The workplace is located near Drottningholm, approximately 10 minutes from Brommaplan. Swedish citizenship is a requirement as employment at FRA involves security clearance. Before employment, you will be security vetted in accordance with the Security Protection Act. Employment includes an obligation to be placed on wartime mobilization reserve. We apply a six-month probationary period. In this recruitment process, work tests/assessments will be used. For more information, you are welcome to contact the recruiting manager at [email protected]. Trade union representatives can be reached at 010-557 46 00. We accept applications via www.fra.se no later than 2026-09-27. Reference number 2026FRA1185-2. Since we have already decided on the recruitment channels we wish to use for this recruitment, we do not wish to be contacted for additional offers of advertising and recruitment assistance. Keywords: IT security, SOC, cloud services, AWS, azure, 365 Employment Type: Permanent employment. Duration: Permanent. Work Hours: Daytime.