IT Technician with IT Security Focus

Svenljunga kommun · Vollzeit

Boråsvägen 13, Svenljunga, Schweden

In Svenljunga, we have the advantages of a small municipality: close to each other, to ideas, and to decisions. We who work here do so because we want to provide the best possible service to our residents. As an employer, we care about your quality of life; it's important to us that you as an employee feel good and are doing well. That's why we invest in good working conditions, good leadership, and encourage your engagement. 1 position(s). JOB RESPONSIBILITIES We are looking for an IT technician with a security focus who wants to work close to the technology and strengthen the municipality's operational, tactical, and strategic security capabilities. The unit has 13 employees, eight of whom work in operations and infrastructure. We are responsible for IT operations, support digitalization and security work, and work with civil defense, continuity, and crisis communication. The role is primarily placed within the IT and Security unit, where you relieve your colleagues and serve as a technical sounding board. You also support the municipality's operations on IT and OT security issues, risks, technical safeguards, and secure work methods. In vendor dialogues, audits, and security assessments, you help the operations clarify requirements, identify shortcomings, and follow up on compliance and measures to maintain a high level of security. You work with: • Analyzing security incidents, risks, and vulnerabilities, and prioritizing and verifying measures. • Contributing to monitoring and incident management. • Working with hardening, secure configurations and controls, web and application security, WAF, and OWASP. • Gathering and implementing threat intelligence and conducting proactive threat hunting. • Monitoring open sources, threat feeds, and dark web for leaked information, compromised credentials, trademark abuse, and targeted threats. • Converting findings into protective measures, incidents, or improvements. • Automating security workflows and playbooks and documenting events, measures, routines, and solutions. You work operationally and preventively and develop our technical and organizational capabilities, our processes, and work methods. Security is built in from the start; architecture governance, robustness, and resilience are central. We manage over 300 systems, many apps, and thousands of devices. Most are run locally, but increasingly more are purchased as a service, which increases the demands for strong authentication, secure information flows, and vendor security. Between IT and OT, you contribute to clear responsibility transfers and secure handovers throughout the entire lifecycle. Some weeks include support and emergency technician work via telephone, cases, and on-site support. This provides understanding of the operations' needs, dependencies, and risks. Remote work is very limited because administrative systems are only used in protected facilities. QUALIFICATIONS You should have: Experience with practical IT security work or IT operations where security has been an essential part. Good understanding of Windows and/or Linux environments and basic knowledge of networks, identity, and access management. IT technical post-secondary education or equivalent competence that the employer deems equivalent. Experience documenting technical environments, security measures, routines, and events; good Swedish in speech and writing. Ability to collaborate and independently drive tasks from analysis to implementation and follow-up. A category B driver's license, as work sometimes occurs at the operations. It is meritorious to have experience in one or more of the following areas: Large-scale operations, containerized solutions, or microservices environments. Security monitoring, log and vulnerability analysis, vulnerability management, incident management, or proactive threat hunting. SIEM, EDR, WAF, MISP, or SOAR, and development and management of automated playbooks. Network security, PKI, strong authentication, identity and access management, or OT security. Gathering and analyzing threat intelligence and monitoring digital exposure through, for example, OSINT, MISP. Structured information sharing or dark web. Practical work according to Zero Trust, established security and target architectures, and governing security principles. For example, NIST SP 800 series or NIST CSF. CIS Controls and hardening according to CIS Benchmarks, DISA STIGs, or equivalent. Web and application security according to OWASP, for example Top 10, ASVS, or CRS. Automation, scripting, integrations, or programming. We are looking for you with a solid technical foundation, clear security interest, and a desire to develop together with us. Your personality is as important as your professional background. You are curious, analytical, and solution-oriented. You can switch between acute incidents and long-term improvements, collaborate with people from different technical backgrounds, and explain risks and measures clearly and pragmatically. You take responsibility for the whole, share knowledge, and contribute to a work environment where we help each other and have fun. Do you want to become part of an organization that has come far but wants to go further? Salary form: Monthly salary. Type of employment: Permanent employment. Duration: Indefinite. Working hours: Daytime. Evening hours may occur. Your personal data will be used within Svenljunga municipality and by people working with recruitment. The committee responsible for recruitment is the personal data controller and is responsible for the processing of personal data. If you want to know who is the personal data controller for your information, you can contact us at [email protected] or 0325-180 00. The purpose of processing personal data is for it to be used for recruitment purposes. The legal basis is consent to administer and document the recruitment process. The information that will be stored and retained due to the appeal process is information you yourself provided, your CV, your cover letter, and any other information you provide to us. We delete your information after 2 years. If you have comments on how we process your personal data or if you believe it is in conflict with data protection regulations, you should inform us as soon as possible. You can do this by contacting us at [email protected] or 0325-180 00 or our Data Protection Officer. You can also file a complaint with the Swedish Integrity Protection Authority ([email protected]). Information about salary ranges for the current position can be found on Svenljunga municipality's website https://www.svenljunga.se/naringsliv--arbete/att-jobba-hos-oss If you want to read more about your rights or how we process your personal data, you can read it on our website. https://svenljunga.se/ovrigt/om-personuppgifter We look forward to receiving your application!