Cyber Instincts AB jobb

About the assignment We are looking for an experienced network and security architect to join a large-scale programme at one of our clients. You will be part of an international network team with members in Sweden and abroad, and play a key role in shaping design solutions in a fast-paced project. The assignment starts in as soon as possible and runs until the end of May 2027 with possibility of extension. You will work about half of your time onsite in Stockholm and the rest remotely. What you will do Develop network and security solutions together with the team Present and anchor design proposals in dialogue with the client Produce design documentation such as HLD, LLD and ADD, as well as delivery instructions Ensure that solutions meet both internal and client requirements Follow up that implementation is carried out according to design and timeline Who we think you are You have several years of experience as a network architect or in a similar senior design role You have in-depth knowledge of Cisco and Aruba You have experience with EVPN/VXLAN in data centre or campus environments You have a solid understanding of network security: NGFW, WAF and IDS/IPS You are used to documenting solutions in a structured and clear way You are fluent in both Swedish and English, spoken and written Why CyberInstincts? With us, you become part of a specialist cybersecurity team working on exciting assignments with large clients. You can choose to work as an employee or as an independent consultant, and we support you throughout the assignment. Apply Send your CV and briefly describe a network project where you were responsible for the design. We review applications continuously, so feel free to apply today.

About the assignment We are looking for an experienced security governance professional to join an international team delivering a secure private cloud environment. The assignment starts in January 2027 and runs for approximately 18 months. You will work onsite in Luxembourg around 40–60% of the time, with the remainder remote. What you will do Your mission is to guide the solution towards formal security accreditation and authorisation to operate. In practice, you will: Define the scope of the accreditation together with stakeholders, and set up governance and a structured approach to evidence Gather and organise the security standards and requirements that apply Review evidence across people, processes and technology, and evaluate it against agreed criteria Keep a clear record of requirements, findings, gaps, decisions and remediation priorities Lead review sessions with the customer and NATO accreditation authorities Deliver a complete, traceable accreditation package, including workbook, evidence and open actions, ready for handover What we are looking for Solid experience of security accreditation, certification or compliance work in complex environments Strong knowledge of NIST and ISO 27001, and experience mapping controls to government cloud frameworks Familiarity with SSP, ST&E and POA&M, as well as defining system boundaries Experience with gap analysis, risk assessment and remediation planning Understanding of the compliance challenges in air-gapped/isolated environments Fluent English, written and spoken Requirements Valid NATO security clearance (or eligibility to hold one) Ability to work onsite in Luxembourg part of the week Why join us? At CyberInstincts, you will be part of a specialist cybersecurity community working on high-impact assignments. We offer flexibility in how we work together, as an employee or as an independent consultant, and support you throughout the assignment. Interested? Apply with your CV and a brief description of your accreditation experience. We review applications continuously, so don’t wait to apply.

Praktik/LIA – Sales & Marketing Lindholmen, Göteborg Period: Vår 2027, enligt din utbildnings praktik- eller LIA-period Omfattning: Heltid, obetalt - 3-6 månader Typ: Praktik eller LIA inom din utbildning, på yrkeshögskola eller universitet Om oss Cyber Instincts är ett konsultbolag inom cybersäkerhet i Göteborg som arbetar i framkant av cybersäkerhet och AI. Vi ingår i en grupp tillsammans med FutureSpex (utbildning och certifiering inom cybersäkerhet och AI) och UltraDefy (AI-strategi och styrning). Vi är ett litet och nära team där alla hjälps åt, idéer får testas och vi gärna firar framgångarna tillsammans, stora som små. Hos oss blir du snabbt en del av gänget och får prova på riktiga uppgifter från första dagen. Om praktikplatsen Vi söker en praktikant som vill lära sig hur försäljning och marknadsföring fungerar i ett växande B2B-bolag. Du arbetar nära vår Sales & Marketing Associate och stöttar i det dagliga arbetet med att synas, skapa kontakter och hitta nya affärer. Det här passar dig som vill få bred erfarenhet, testa dina idéer på riktigt och se hur det du lär dig i utbildningen fungerar i praktiken. Det här kommer du att arbeta med Ta fram och publicera innehåll till LinkedIn och andra kanaler Researcha och kartlägga potentiella kunder och samarbetspartners Stötta i leadsgenerering och uppsökande kontakt Hjälpa till att planera och genomföra event, webbinarier och nätverksaktiviteter Följa upp kampanjer och ta fram enkla rapporter Hålla ordning i CRM och stötta i administration kopplad till sälj och marknad Vi söker dig som Studerar inom marknadsföring, försäljning, digital marknadsföring eller liknande, på yrkeshögskola eller universitet Har praktik eller LIA som en del av din utbildning Talar och skriver flytande svenska och engelska Är nyfiken, tar egna initiativ och gillar att komma med idéer Tycker om att träffa nya människor och inte är rädd för att ta kontakt Är strukturerad och kan arbeta självständigt när du fått en uppgift Meriterande Erfarenhet av LinkedIn, Canva eller liknande verktyg Intresse för tech, cybersäkerhet eller AI Vi erbjuder En praktikplats där du får arbeta med riktiga uppgifter och se resultat av ditt arbete En handledare som stöttar dig under hela perioden Inblick i cybersäkerhet, AI och hur ett växande bolag byggs Hybridarbete från vårt kontor på Lindholmen Ansökan Vi går igenom ansökningar löpande. Skicka gärna med information om din utbildning och när din praktik- eller LIA-period infaller.

Sales & Marketing Associate Lindholmen, Göteborg (hybrid) Omfattning: 50 %, med goda möjligheter att växa till heltid i takt med att rollen och bolaget utvecklas Anställning: Ett år till att börja med, med goda möjligheter till förlängning Tillträde: Snarast Om oss Cyber Instincts är ett konsultbolag inom cybersäkerhet i Göteborg som arbetar i framkant av cybersäkerhet och AI. Vi ingår i en grupp tillsammans med FutureSpex (utbildning och certifiering inom cybersäkerhet och AI) och UltraDefy (AI-strategi och styrning). Vi är ett litet och nära team där alla hjälps åt, idéer får testas och vi gärna firar framgångarna tillsammans, stora som små. Hos oss blir du en självklar del av gänget och får ett verkligt ansvar från första dagen. Om rollen Vi söker en Sales & Marketing Associate som vill hjälpa oss att stärka vår närvaro på marknaden, skapa nya affärer och driva vår fortsatta tillväxt. Rollen är bred och spänner över försäljning, affärsutveckling, marknadsföring och event. Du rör dig mellan strategiskt tänkande och praktiskt genomförande, och trivs med att själv komma på hur ni ska nå målet snarare än att följa en färdig mall. Vi söker medvetet inte någon som väntar på detaljerade instruktioner, våra processer utvecklas fortfarande, så vi önskar att du ser vad som saknas, kommer med egna idéer och tar initiativ. Du arbetar nära teamet men driver ditt område självständigt. Arbetsuppgifter Tillväxt och affärsutveckling Identifiera och skapa nya affärsmöjligheter och göra B2B-affärer Äga leadsgenerering och prospektering, inklusive uppsökande kontakt med nya kunder Stötta säljprocesser och kunddialoger Bidra till att bygga vår pipeline och våra intäktsmöjligheter Bygga och vårda relationer med kunder och partners Marknadsföring och digital närvaro Ansvara för vår synlighet i sociala medier, främst LinkedIn Planera och publicera innehåll Bidra med innehåll till hemsida, artiklar och kampanjer Driva varumärkesbyggande aktiviteter Event och nätverkande Representera bolaget på branschevent, konferenser och nätverksträffar Skapa nya kontakter och affärsmöjligheter Planera och samordna egna event och aktiviteter Samordning och stöd Administrativt stöd inom affärs- och marknadsprocesser Samordna aktiviteter kopplade till marknadsföring och partnerskap Arbeta nära ledningen med olika tillväxtinitiativ Vi söker dig som Har 1–4 års erfarenhet av försäljning, marknadsföring, growth eller affärsutveckling Har erfarenhet från B2B Är driven, tar egna initiativ och kommer med egna idéer Talar och skriver flytande svenska och engelska Gillar att bygga nätverk och tycker att det är roligt att ta kontakt med nya människor och skapa affärer Meriterande Erfarenhet av sociala medier och digital marknadsföring Erfarenhet av leadsgenerering och prospektering Bakgrund inom tech, cybersäkerhet eller konsultverksamhet Vi erbjuder En bred roll i utveckling i ett växande bolag Stort eget ansvar och verkligt inflytande över hur saker byggs upp och din egna roll ska se ut Inblick i cybersäkerhet, AI och digital transformation Hybridarbete från vårt kontor på Lindholmen Ansökan Vi går igenom ansökningar löpande och tjänsten tillsätts så snart vi hittat rätt person.

About the assignment We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats. Location: Stockholm, with remote work possible (up to 100%) Start: 26 October 2026 (we are looking to fill this as soon as possible) End: 31 August 2027 Scope: Full time (100%) Working language: English What you'll be doing Leading and coordinating the security operations function (SOC) day to day Owning incident management and threat follow-up from detection to closure Helping lead P1 and major incidents when needed, sometimes outside office hours Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time Coordinating with internal teams and external service providers, acting as the subject matter expert Turning technical findings into clear actions and reporting for managers and stakeholders What we're looking for A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms Experience with vulnerability management and security monitoring Understanding of modern identity risks, including privileged and non-human identities Strong communication and stakeholder skills, and fluent English A calm, structured and proactive approach under pressure Nice to have Experience from global or regulated organisations Automation of triage and response Certifications such as GCIH, GCIA or CISSP Interested? Apply as soon as possible, as we review applications on a rolling basis and the assignment starts shortly.

Lindholmen, Gothenburg (Hybrid) Scope: 50%, with strong potential to grow into full-time as the role and company develop Contract: 1 year to start, with good opportunities for extension Start: As soon as possible About us Cyber Instincts is a Gothenburg-based cybersecurity consultancy working at the forefront of cybersecurity and AI, together with our group companies FutureSpex (cybersecurity and AI training/certification) and UltraDefy (AI strategy and governance). We're a small, fast-moving team, which means this role comes with real ownership from day one rather than a narrow, predefined lane. About the role We're looking for a Growth & Marketing Associate to help build our market presence, generate new business opportunities, and drive our continued growth. This is both a strategic and hands-on role, ideal for someone who enjoys combining marketing, networking, and business-driving activities — and who's comfortable figuring out how to get there, not just executing a fixed playbook. We're intentionally not looking for someone who waits for detailed instructions. Our processes are still evolving, so you'll be expected to spot gaps, bring your own ideas to the table, and take initiative on what "good" looks like — working closely with the team, but driving your own area independently. Responsibilities Growth & business development Identify and create new business opportunities Own lead generation and prospecting Support sales processes and client conversations Contribute to developing our pipeline and revenue opportunities Build and maintain relationships with clients and partners Marketing & digital presence Manage our visibility on social media Plan and publish content Contribute to content for our website, articles, and campaigns Drive brand-building activities Events & networking Represent the company at industry events, conferences, and networking opportunities Build new contacts and business opportunities Help plan and coordinate events Coordination & support Provide administrative support across business and marketing processes Coordinate activities tied to marketing and partnerships Work closely with leadership on various growth initiatives What we're looking for 1–4 years of experience in marketing, sales, growth, or business development Experience in B2B environments A proactive, self-driven mindset — someone who brings new ideas rather than waiting to be told what to do Comfortable working independently, in a fast-changing environment Strong communication skills in both Swedish and English Enjoys building networks and creating new business opportunities Thrives in an entrepreneurial, fast-paced environment Nice to have Experience with LinkedIn and digital marketing Experience with lead generation and prospecting Background in tech, cybersecurity, or consulting What we offer A broad, developing role in a growing company Significant ownership and real influence over how things are built Exposure to cybersecurity, AI, and digital transformation Hybrid work from our office at Lindholmen Application We interview candidates on a rolling basis and the role may be filled before the application deadline. Start: as soon as possible.

Are you the person other engineers come to when a Zero Trust access problem needs solving, not just documenting? We're looking for a Technical Lead to help build out a secure, scalable remote access platform on Microsoft Entra — starting with Entra Private Access — for a large enterprise environment. The role in short You'll take technical ownership of a growing Global Secure Access platform, working closely with a Product Owner and cross-functional teams spanning Identity, Network, Endpoint, Security, SOC, Service Desk, and application teams. This isn't a purely architectural role — you'll be hands-on with configuration, troubleshooting, and platform evolution, while also setting the technical direction others follow. Location: Södertälje, hybrid Applicants must currently reside in Sweden The assignment is projectbased at our client and will continue till 2027-10-08 with possibilities for extension. What you'll be doing Own the technical design and ongoing development of the Microsoft Entra Global Secure Access platform Design and maintain a scalable Entra Private Access setup — connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional resilience Configure and govern application access through Entra ID, security groups, Conditional Access, device compliance, MFA, and Zero Trust principles Lead the migration of internal applications from VPN-based access to Private Access Analyze application connectivity requirements — DNS, TCP/IP, ports, routing, authentication, TLS Set technical standards, configuration baselines, deployment patterns, and rollback procedures Monitor platform health: connector availability, capacity, traffic flows, authentication, policy sync Lead complex incident resolution and root-cause analysis Maintain operational documentation, runbooks, and troubleshooting guides Support security assessments, risk reviews, and audit activities Coordinate with Microsoft Support and internal platform teams Contribute to future expansion, including Entra Internet Access where relevant Mentor other engineers and help establish consistent technical practices Work within proper change-management and release processes What we're looking for Microsoft Entra & Identity Strong, hands-on Entra ID experience in a large enterprise setting Practical experience with identity-based access control, security groups, application assignments, entitlement models Solid understanding of Conditional Access (user, device, location, risk, session-based controls) Experience implementing or running MFA and Zero Trust access controls Good understanding of device identity/compliance, ideally with Intune and Defender Global Secure Access & Private Access Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a comparable ZTNA solution Practical understanding of Private Network Connectors, connector groups, registration, certificates, outbound connectivity Experience designing for high availability, failover, resilience, capacity management Ability to troubleshoot traffic forwarding, policy sync, and application connectivity issues Networking & Application Connectivity Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS, HTTP/HTTPS Experience troubleshooting connectivity to internal apps, servers, databases, infrastructure services Understanding of network segmentation and access control across application/user groups Ability to analyze connectivity needs for file services, RDP, engineering tools, databases, enterprise platforms Operations & Service Management Experience running business-critical services in production Strong monitoring, logging, incident management, and root-cause analysis skills Experience with change/release management, technical documentation, operational handover Ability to define support models, runbooks, escalation paths Experience working alongside Security Operations/SOC teams during investigations Technical Leadership & Collaboration Track record as a Technical Lead, Platform Lead, or Senior Engineer Sound technical decision-making and clear communication to technical and non-technical audiences Experience coordinating across Identity, Network, Endpoint, Security, Infrastructure, and application teams Strong ownership mentality, comfortable working independently in an evolving product area Ability to mentor and set consistent technical standards Nice to have Experience with PAM, PIM, JIT access, and access governance Experience with ServiceNow, Jira, or similar ITSM/workflow platforms Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR, or similar frameworks Experience with risk assessments (BIA, TVA, IRAM, or comparable) Experience supporting both macOS and Windows access scenarios Who you are Structured, analytical, and pragmatic — equally comfortable in strategic architecture discussions and hands-on troubleshooting. You proactively spot risks and dependencies, take ownership without waiting to be told, and communicate clearly across technical and non-technical stakeholders. You know how to balance security, user experience, resilience, and delivery speed.

About the role We are building our network of senior cybersecurity consultants focused on the automotive industry, for assignments with our OEM and Tier-1 clients. We are looking for profiles with deep experience in cybersecurity for embedded vehicle systems, so we can match candidates against upcoming assignments. What you'll be doing (varies by assignment) Conducting Threat Analysis and Risk Assessments (TARA) in line with ISO 21434 Ensuring compliance with UNECE R155/R156 throughout development processes Working on security architecture for embedded automotive platforms (AUTOSAR Classic/Adaptive, Linux/QNX-based, or similar) Working with vehicle security engineering more broadly, e.g. secure boot, PKI, cryptography, or security testing Supporting security assessments and advisory work with development teams, OEMs and Tier-1 suppliers Working with vehicle communication protocols such as CAN, LIN and Ethernet What we're looking for Several years of experience in automotive or embedded systems cybersecurity Strong knowledge of ISO 21434 and TARA methodology Experience with UNECE R155/R156 regulations Experience with vehicle communication protocols such as CAN, LIN and Ethernet Nice to have Experience with AUTOSAR (Classic and/or Adaptive) or Linux/QNX-based embedded platforms Experience from both OEM and Tier-1 supplier side ASPICE knowledge Experience in advisory/assessment roles, or in security testing/penetration testing ISO 26262 (functional safety) Sound like you? Apply now and we'll reach out when a relevant assignment comes up.

CyberInstincts is continuously building a network of senior network and security consultants for assignments with our clients across banking, industry, automotive and telecom. We are looking for consultants with deep, hands-on experience operating and securing large enterprise network environments, so we can match candidates against upcoming client assignments. As a consultant with us, you may work on anything from operational network management and incident handling to network security architecture in critical infrastructure. Our current assignments are primarily Cisco and HPE Aruba environments, but we welcome candidates with strong experience from other major vendors (e.g. Juniper, Fortinet, Palo Alto, Checkpoint). What you'll be doing (varies by assignment) Configuration, operation and troubleshooting of enterprise switching, routing and wireless infrastructure Managing WAN/SD-WAN environments Administering network access and security platforms (e.g. Cisco ISE, Prime, DNAC, or equivalent) Firewall and VPN administration and troubleshooting Incident, problem and change management following ITIL, using ServiceNow or similar ITSM tools Collaborating with internal IT teams and telecom providers to resolve network issues within agreed SLAs What we're looking for 10+ years of experience in enterprise network operations Solid knowledge of enterprise switching and routing (Spanning Tree, VTP, routing protocols) Hands-on experience with firewall/VPN administration Experience with ITSM platforms (preferably ServiceNow) and ITIL processes Strong analytical skills and a structured approach to working in an operational, business-critical environment Nice to have Experience with Cisco Nexus and/or HPE Aruba (including SD-WAN) Experience with Cisco ISE, Prime and/or DNAC or equivalent NAC/network management platforms Scripting/automation experience, Python preferred Experience with 24x7 operations in large enterprise environments Experience from telecom, industry or financial services Sound like you? Apply now and we'll reach out when a relevant assignment comes up.

Lund, Sweden | On-site | Long-term assignment (Oct 2026 – Sep 2027, strong extension potential) About the role We're looking for an experienced network operations specialist to join a large-scale Infrastructure Services team for one of our clients - a global industrial technology company based in Lund. This is a hands-on, operationally critical role: you'll be the person keeping a sprawling enterprise network environment stable, secure, and running, across Cisco and HPE Aruba infrastructure. You'll work close to the metal - configuring, monitoring, troubleshooting - while also coordinating with internal IT teams and external telecom providers to keep everything within SLA. If you like solving real problems in a live, 24x7-critical environment rather than just writing documentation about them, this is built for you. What you'll actually be doing Day-to-day administration of enterprise-scale Cisco and HPE Aruba networks Configuring and maintaining HPE Aruba environments, including SD-WAN Managing Cisco Nexus infrastructure Keeping switches, routers, and wireless infrastructure (controllers + APs) healthy and fast Working inside Cisco ISE, Prime, and DNAC for network management and security Driving incidents to resolution within SLA, using ServiceNow and ITIL-based processes (Incident, Problem, Change, Knowledge Management) Liaising directly with telecom providers on WAN/connectivity issues Contributing to proactive failure detection and planned maintenance, not just firefighting What we're looking for 10+ years of hands-on enterprise network operations experience Strong command of Cisco switching/routing, including STP and VTP Solid WAN technology knowledge Practical experience with HPE Aruba - Aruba SD-WAN experience is a strong plus Hands-on Cisco Nexus experience Comfort administering Cisco wireless infrastructure (controllers, APs) Familiarity with Cisco ISE, Prime, and DNAC ITSM experience, ideally with ServiceNow, and solid ITIL process knowledge A track record of resolving network incidents against defined SLAs Strong, independent troubleshooting instincts Nice to have Scripting/automation skills (Python a plus) Experience in large, complex enterprise network environments Background in 24x7 network operations or infrastructure support Practical details Location: On-site in Lund - this is not a remote role Workload: Full-time, 40h/week Start: As soon as possible Note: A pre-assignment drug test is required Some flexibility across time zones/holidays may be needed given 24x7 coverage