Security Analyst specializing in Operational Technology (OT)

As a Security Analyst, you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work, you will have access to a range of SIEM, SOAR, and XDR platforms. In this role, you will proactively and reactively defend our customers against cyberattacks.

In addition, you will have the opportunity to help build our OT offering and your responsibilities will include monitoring and analyzing security alerts from OT environments.

Key Responsibilities

• Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel).

• Manage solutions that provide customers with visibility into their OT environments, including presenting findings and leading continuous improvement initiatives.

• Work with the tools Nozomi, Cisco Cyber Vision, Defender for IoT and Vectra AI

• Analyze and mitigate threats using EDR and XDR platforms.

• Act as a Technical Delivery Manager for assigned customers, serving as their primary technical point of contact, delivering monthly reports, and maintaining customer environments.

• Independently evaluate security events and determine appropriate response actions.

• Document incident timelines and investigation findings.

• Advise customers on security incidents and recommended remediation actions.

• Perform proactive threat hunting.

• Develop and refine detection rules.

• Improve existing processes and design new operational procedures.

• Contribute to our internal threat intelligence database and indicators of compromise (IOCs).

• Continuously expand your technical expertise through training and professional development.

• Configure, manage, and maintain log management platforms (Splunk and Microsoft Sentinel).

• Deploy infrastructure and install components for new customer environments.

• Provide customer support, onboarding, and troubleshooting for SIEM solutions.

Why Join Orange Cyberdefense?

• Become part of one of the cybersecurity industry's leading organizations, working with market-leading technologies.

• Join a collaborative, low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the company's direction.

• Work in an environment that values curiosity, autonomy, knowledge sharing, and continuous learning.

• Help secure major international organizations against evolving cyber threats.

• Benefit from excellent opportunities for professional development and specialization.

About Orange Cyberdefense

Orange Cyberdefense is Sweden's leading cybersecurity company, with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services, ranging from highly technical solutions such as Security Operations Centers (SOC), firewall solutions, technical threat intelligence, vulnerability management, and SIEM, to governance, risk management, and security strategy consulting.

We are a global team of approximately 3,000 colleagues, including 400 employees in Sweden.

At Orange Cyberdefense, diversity is one of our greatest strengths. We believe that different backgrounds, experiences, and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process.

Who We Are Looking For

We are looking for someone with post-secondary education or professional experience in cybersecurity, digital forensics, or network security. Previous experience in a similar Security Analyst role is considered an advantage.

As a person, you are courageous, curious, and trustworthy. You build confidence with customers, contribute to the company's success, and collaborate effectively with colleagues. You are able to gather and assess information, distinguish critical details from noise, build a comprehensive understanding of security events, and communicate your findings clearly to both technical and non-technical audiences.

We value curiosity, creativity, independence, and initiative even more than complete expertise.

For this particular team, you will work with public sector customers, meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English, spoken and written, is also required.