Security Analyst specializing in Operational Technology (OT)

As a Security Analyst you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work you will have access to a range of SIEM SOAR and XDR this role you will proactively and reactively defend our customers against cyberattacks.

In addition you will have the opportunity to help build our OT offering and your responsibilities will include monitoring and analyzing security alerts from OT environments.

• Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel).

• Manage solutions that provide customers with visibility into their OT environments including presenting findings and leading continuous improvement initiatives.

• Work with the tools Nozomi Cisco Cyber Vision Defender for IoT and Vectra AI

• Analyze and mitigate threats using EDR and XDR platforms.

• Act as a Technical Delivery Manager for assigned customers serving as their primary technical point of contact delivering monthly reports and maintaining customer environments.

• Independently evaluate security events and determine appropriate response actions.

• Document incident timelines and investigation findings.

• Advise customers on security incidents and recommended remediation actions.

• Perform proactive threat hunting.

• Develop and refine detection rules.

• Improve existing processes and design new operational procedures.

• Contribute to our internal threat intelligence database and indicators of compromise (IOCs).

• Continuously expand your technical expertise through training and professional development.

• Configure manage and maintain log management platforms (Splunk and Microsoft Sentinel).

• Deploy infrastructure and install components for new customer environments.

• Provide customer support onboarding and troubleshooting for SIEM solutions.

• Become part of one of the cybersecurity industrys leading organizations working with market-leading technologies.

• Join a collaborative low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the companys direction.

• Work in an environment that values curiosity autonomy knowledge sharing and continuous learning.

• Help secure major international organizations against evolving cyber threats.

• Benefit from excellent opportunities for professional development and specialization.

Orange Cyberdefense is Swedens leading cybersecurity company with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services ranging from highly technical solutions such as Security Operations Centers (SOC) firewall solutions technical threat intelligence vulnerability management and SIEM to governance risk management and security strategy consulting.

We are a global team of approximately 3000 colleagues including 400 employees in Sweden.

At Orange Cyberdefense diversity is one of our greatest strengths. We believe that different backgrounds experiences and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process.

We are looking for someone with post-secondary education or professional experience in cybersecurity digital forensics or network security. Previous experience in a similar Security Analyst role is considered an advantage.

As a person you are courageous curious and trustworthy. You build confidence with customers contribute to the companys success and collaborate effectively with colleagues. You are able to gather and assess information distinguish critical details from noise build a comprehensive understanding of security events and communicate your findings clearly to both technical and non-technical audiences.

We value curiosity creativity independence and initiative even more than complete expertise.

For this particular team you will work with public sector customers meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English spoken and written is also required.