Cyber Instincts AB jobb

Lund, Sweden | On-site | Long-term assignment (Oct 2026 – Sep 2027, strong extension potential) About the role We're looking for an experienced network operations specialist to join a large-scale Infrastructure Services team for one of our clients - a global industrial technology company based in Lund. This is a hands-on, operationally critical role: you'll be the person keeping a sprawling enterprise network environment stable, secure, and running, across Cisco and HPE Aruba infrastructure. You'll work close to the metal - configuring, monitoring, troubleshooting - while also coordinating with internal IT teams and external telecom providers to keep everything within SLA. If you like solving real problems in a live, 24x7-critical environment rather than just writing documentation about them, this is built for you. What you'll actually be doing Day-to-day administration of enterprise-scale Cisco and HPE Aruba networks Configuring and maintaining HPE Aruba environments, including SD-WAN Managing Cisco Nexus infrastructure Keeping switches, routers, and wireless infrastructure (controllers + APs) healthy and fast Working inside Cisco ISE, Prime, and DNAC for network management and security Driving incidents to resolution within SLA, using ServiceNow and ITIL-based processes (Incident, Problem, Change, Knowledge Management) Liaising directly with telecom providers on WAN/connectivity issues Contributing to proactive failure detection and planned maintenance, not just firefighting What we're looking for 10+ years of hands-on enterprise network operations experience Strong command of Cisco switching/routing, including STP and VTP Solid WAN technology knowledge Practical experience with HPE Aruba - Aruba SD-WAN experience is a strong plus Hands-on Cisco Nexus experience Comfort administering Cisco wireless infrastructure (controllers, APs) Familiarity with Cisco ISE, Prime, and DNAC ITSM experience, ideally with ServiceNow, and solid ITIL process knowledge A track record of resolving network incidents against defined SLAs Strong, independent troubleshooting instincts Nice to have Scripting/automation skills (Python a plus) Experience in large, complex enterprise network environments Background in 24x7 network operations or infrastructure support Practical details Location: On-site in Lund - this is not a remote role Workload: Full-time, 40h/week Start: As soon as possible Note: A pre-assignment drug test is required Some flexibility across time zones/holidays may be needed given 24x7 coverage

Cyber Instincts is a Gothenburg-based technology consultancy with focus on cybersecurity, working with clients across automotive, manufacturing, banking and finance, retail, and healthcare. We're building our senior bench for upcoming client engagements centered on AWS infrastructure - building and operating secure, enterprise-scale cloud environments rather than just consuming them. What the work looks like: Designing and implementing AWS infrastructure using CloudFormation and CDK Building serverless architectures (Lambda, DynamoDB, EventBridge, and similar) Establishing governance, guardrails, and identity models across large AWS Organizations (Control Tower, StackSets, SCPs) Deep, hands-on IAM and SSO design at enterprise scale Building and maintaining CI/CD pipelines and cloud automation Improving observability - logging, metrics, monitoring, and alerting Troubleshooting distributed systems and production issues, and driving root-cause analysis What you'll bring: 5+ years of experience designing and implementing AWS infrastructure at production scale Strong scripting and automation skills in Python and/or Bash Practical experience with containers and cloud-native technologies Deep understanding of IAM, SSO, and enterprise identity/governance models Solid understanding of CI/CD practices and cloud automation A plus, not a requirement: AWS certifications Experience with AI-assisted development tooling Familiarity with agile ways of working (Jira/Kanban/SAFe) Experience with micro-component solution architectures in the cloud This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you. What the work looks like: Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms) Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures Acting as the technical bridge between IT operations, security leadership, and compliance functions What you'll bring: 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint) Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001) Comfortable owning incident response coordination involving identity-related compromises Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on A plus, not a requirement: Microsoft certifications (SC-300, AZ-500) or equivalent Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation Prior consulting experience across multiple client environments This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås. The role in short You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work. What you'll be working on Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance Risk-assessing products and making sure actions are actually implemented, not just documented Owning and coordinating security work within development projects – being the person who holds the whole picture together Planning and running various types of security testing Mapping attack surfaces and building threat models for the products Reviewing source code with a security lens Contributing to system hardening, including image management for Windows environments Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it Being involved when security requirements are defined for new features Developing and implementing concrete security solutions, for both embedded systems and traditional applications Driving vulnerability management – from discovery to remediation Writing the documentation that's needed: architecture descriptions, processes, agreement materials Preparing development teams ahead of security reviews Keeping an eye on emerging threats, vulnerabilities, and security updates Reviewing how well suppliers live up to the security requirements set for them Acting as a point of contact for both local and global security functions Who are we looking for? We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles. It's an extra plus if you have experience with any of the following: Embedded systems and firmware C / C++ VHDL / Assembler Real-time operating systems (RTOS) C# / Java Windows environments and Windows-based applications Secure architecture and implementation Vulnerability management and security testing If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out. The assignment Location: Västerås, on-site Start: October 12, 2026 Duration: through March 31, 2027 Scope: Full-time

Build Your Future in Information Security Management Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you! About the Internship Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification. What You'll Learn As an intern, you will: Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit. Learn how information security risk assessments are run and turned into a practical risk treatment plan. Help draft the policies, procedures and records that make up a working ISMS. Support internal audits and management reviews, and see how findings are followed up and closed. Gain hands-on experience with the Annex A controls and how they are applied in real organisations. This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it. Why Join Us? Hands-on experience with real ISO 27001 implementations, from first workshop to certification. Guidance and mentorship from experienced ISMS consultants and lead implementers. Exposure to a wide range of clients and industries across Sweden and the Nordics. A collaborative and supportive environment where questions are always welcome. Who We're Looking For We welcome interns who: Have a strong interest in information security, risk management and governance. Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works. Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning. Understand the basics of risk assessment: assets, threats, likelihood and impact. Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish. Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order. Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement. Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers. Are ready to contribute ideas and collaborate with a dynamic team. Approach client information with care, discretion and a strong ethical mindset. How to Apply Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role. It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on. Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg. Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security! Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you! About the Internship Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification. What You'll Learn As an intern, you will: Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit. Learn how information security risk assessments are run and turned into a practical risk treatment plan. Help draft the policies, procedures and records that make up a working ISMS. Support internal audits and management reviews, and see how findings are followed up and closed. Gain hands-on experience with the Annex A controls and how they are applied in real organisations. This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it. Why Join Us? Hands-on experience with real ISO 27001 implementations, from first workshop to certification. Guidance and mentorship from experienced ISMS consultants and lead implementers. Exposure to a wide range of clients and industries across Sweden and the Nordics. A collaborative and supportive environment where questions are always welcome. Who We're Looking For We welcome interns who: Have a strong interest in information security, risk management and governance. Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works. Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning. Understand the basics of risk assessment: assets, threats, likelihood and impact. Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish. Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order. Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement. Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers. Are ready to contribute ideas and collaborate with a dynamic team. Approach client information with care, discretion and a strong ethical mindset. How to Apply Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role. It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on. Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg. Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security! Join us, and let's build a safer digital world together!

Är du van att bygga säkerhet in i produkter från grunden, snarare än att lägga på det i efterhand? Vi söker en cybersäkerhetsspecialist till industriell produktutveckling – Västerås. Rollen i korthet Du blir en brygga mellan cybersäkerhet och den tekniska utvecklingsorganisationen. Uppdraget innebär att du dagligen jobbar nära mjukvaruutvecklare, systemarkitekter och andra tekniska profiler för att se till att säkerhet byggs in redan i designfasen. Fokus ligger särskilt på att navigera de nya kraven i EU:s cyberresiliensakt (CRA) och omsätta dem i konkreta åtgärder i den dagliga utvecklingen. Det här kommer du bland annat jobba med Kartlägga var organisationen står idag gällande cybersäkerhet och peka ut vägen mot CRA-efterlevnad Riskbedöma produkter och driva att åtgärder faktiskt genomförs, inte bara dokumenteras Äga och samordna säkerhetsarbetet inuti utvecklingsprojekten – vara den som håller ihop helheten Planera och genomföra säkerhetstester av olika slag Kartlägga attackytor och bygga hotmodeller för produkterna Gå igenom källkod med säkerhetsglasögon på Bidra till att härda system, inklusive image-hantering för Windows-miljöer Se till att teamen jobbar enligt en säker utvecklingsprocess (SDLC) och hitta förbättringsmöjligheter i den Vara med när säkerhetskrav tas fram och formuleras för nya funktioner Ta fram och implementera konkreta säkerhetslösningar, både för inbyggda system och traditionella applikationer Driva sårbarhetshantering – från upptäckt till åtgärd Skriva den dokumentation som krävs: arkitekturbeskrivningar, processer, avtalsunderlag Förbereda utvecklingsteam inför säkerhetsgranskningar Bevaka nya hot, sårbarheter och säkerhetsuppdateringar i omvärlden Granska hur väl leverantörer lever upp till ställda säkerhetskrav Fungera som kontaktyta gentemot både lokala och globala säkerhetsfunktioner Vem letar vi efter? Vi tror att du har en stabil grund inom cybersäkerhet kopplat till produktutveckling – gärna med rötter i mjukvaruutveckling, systemarkitektur eller inbyggda system. Du är bekväm med att kliva in i utvecklingsteam och ge praktiskt stöd, inte bara leverera rapporter. Eftersom rollen innebär mycket samverkan – lokalt och internationellt – behöver du vara trygg i att kommunicera med många olika typer av tekniska profiler. Det är extra intressant om du har erfarenhet av något av följande: Inbyggda system och firmware C / C++ VHDL / Assembler Realtidsoperativsystem (RTOS) C# / Java Windows-miljöer och Windows-baserade applikationer Säker arkitektur och implementation Sårbarhetshantering och säkerhetstestning Har du dessutom jobbat praktiskt med CRA, IEC 62443, secure development lifecycle, hotmodellering eller säkerhetsarkitektur – toppen, men inget krav för att du ska höra av dig. Uppdraget Ort: Västerås, på plats Start: 12 oktober 2026 Längd: till och med 31 mars 2027 Omfattning: Heltid

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our bench for upcoming client engagements across three specific areas: Identity & Access Management (IAM), API and application security, and penetration testing. If you work in one or more of these areas we want to hear from you. Whether you specialize in one of these areas or bring broader security experience across several you are welcome to apply. Identity & Access Management (IAM) • Hands-on experience with IAM platforms such as Entra ID / Azure AD, Okta, Ping Identity, or SailPoint • Experience designing or managing access control models (RBAC/ABAC), SSO, MFA, and privileged access management (PAM) • Familiarity with provisioning and deprovisioning workflows and identity governance in enterprise environments API & Application Security • Practical experience testing or securing REST/GraphQL APIs, including authentication flows, authorization logic, rate limiting, and input validation • Hands-on use of tools such as Burp Suite, Postman, or OWASP ZAP • Solid grasp of the OWASP API Security Top 10 and OWASP Top 10, and the ability to translate findings into remediation guidance developers can act on Penetration Testing • Experience running or assisting web application, network, or infrastructure penetration tests • Comfortable with tools such as Burp Suite, Nmap, Metasploit, or Nessus • CTF experience (Hack The Box, TryHackMe, PortSwigger Web Security Academy) or a home lab counts just as much as job experience Across all tracks, we're looking for: • At least 1 to 2 years of hands-on experience in your area, gained through work, internships, or serious self-driven practice • Comfort working in Linux and/or Windows environments, with solid networking fundamentals • Certifications are a plus, not a requirement. Examples include CEH, eJPT, OSCP, CompTIA Security+, or relevant IAM vendor certifications • Clear written and verbal communication: you'll need to explain findings to both engineers and non-technical stakeholders • Discretion and a strong ethical grounding, as you'll be working inside client systems and sensitive data This is a Sweden-based role, with placements at client sites across the country. You'll be employed or engaged on a freelance basis and placed directly with us based at our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based technology consultancy with roots in cybersecurity, working with clients across automotive, manufacturing, banking and finance, retail, and healthcare. As part of our growing technology practice, we're building our bench for upcoming client engagements in data engineering, specifically around cloud data platforms, pipeline development, and data integration on Azure and/or AWS. If you build the infrastructure that turns raw data into something people can trust and use, we want to hear from you! Depending on the assignment, the work might involve: • Designing and building ETL/ELT pipelines feeding a data warehouse or lakehouse • Standing up or extending data platforms from the ground up, including ingestion, storage, and transformation layers • Integrating data across systems, such as APIs, databases, legacy platforms, and third-party sources • Supporting analytics and BI teams with clean, reliable, well-modeled data What you'll bring: • At least 2 to 3 years of hands-on experience building data pipelines or platforms in a production environment • Solid experience with one major cloud platform: Azure (Data Factory, Synapse, Databricks) or AWS (Glue, Redshift, S3-based pipelines) • Strong SQL and programming skills in Python or similar • Practical experience with data modeling and orchestration tools such as dbt, Airflow, or Databricks • An understanding of data quality and governance, and how to build pipelines that scale without silently breaking • A plus: experience with Snowflake, Kafka or event streaming, or working directly with BI teams using Power BI, Looker, or Tableau Across all assignments: • Comfortable working independently inside a client's existing tech stack and team • Clear communication, as you'll need to explain data issues and decisions to both engineers and non-technical stakeholders • Certifications are a plus, not a requirement. Examples include Microsoft Azure Data Engineer Associate or AWS Certified Data Engineer This is a Sweden-based role, with placements at client sites across the country. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.