Ready to lead a global detection migration? ASSA ABLOY in Malmö is looking for a Senior Detection Engineer to lead the transition of threat detection logic from Splunk and SentinelOne over to Microsoft Defender XDR & Sentinel. About the role This is a full-time consultancy assignment (40h/week) based in Malmö on a hybrid schedule, running initially through the end of the year with a strong potential for extension. As a Detection Engineer, you will play a key role in consolidating and modernizing ASSA ABLOY’s global threat detection capability. You will evaluate existing rules in Splunk and SentinelOne, translate and optimize search queries into KQL, and build tailored detections in Microsoft Defender XDR and Microsoft Sentinel. The objective is to achieve high-fidelity threat detection with minimal false positives, accompanied by thorough documentation for the SOC team. Work tasks The role focuses on transforming and optimizing security detection rules from legacy systems into a modern Microsoft SIEM/XDR environment to ensure a threat-informed defense. Logic Conversion & Optimization: Evaluate existing detection logic in Splunk (SPL) and SentinelOne, and re-engineer queries into efficient KQL rules. Gap Analysis & MITRE Mapping: Identify detection gaps, eliminate redundant alerts, and align detections with the MITRE ATT&CK framework. Tuning & Validation: Test and fine-tune detection rules within Microsoft Defender XDR and Sentinel to reduce noise. Documentation & Enablement: Collaborate closely with SOC analysts, threat hunters, and platform engineers, creating clear standard operating procedures. We are looking for At least 5 years of experience within Cyber Security, SOC, Threat Hunting, or Detection Engineering. Strong hands-on experience in KQL (Kusto Query Language) and custom detection creation. In-depth practical knowledge of Microsoft Defender XDR and Microsoft Sentinel. Demonstrated experience with Splunk (SPL) and/or SentinelOne to evaluate and migrate existing logic. Fluency in English, both written and spoken (corporate language). It is meritorious if you have Relevant certifications such as Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Security Operations Analyst Associate (SC-200). Experience with automated response workflows (SOAR / Logic Apps) and integrations in large-scale enterprise environments. Proficiency in Swedish To succeed in the role, your personal skills are: Change oriented Supportive Orderly Responsible Intellectually curious Our recruitment process This recruitment process is handled by Academic Work and it is our client’s wish that all questions regarding the position is directed to Academic Work. Our selection process is continuous and the advert may close before the recruitment process is completed if we have moved forward to the next phase. The process includes two tests: one personality test and one cognitive test. The tests are tools to find the right talent for the right position, to enable equality, diversity, and a fair process.

About 0TO9 0TO9 is a bank for entrepreneurship, built by and for financial innovators. We provide infrastructure for entrepreneurs ready to start and scale the next generation of financial products and platforms. Founded in 2025, we're already 75+ co-workers across Europe, and growing fast. Our name reflects our mission: from zero to success, from idea to impact, from now to what's next. The Role We're looking for a Senior IT Operations Engineer who enables our organization to grow. You'll be part of a team that delivers IT and cybersecurity to the companies in our portfolio, supporting them whether they're onboarding a new team, setting up a new office, or choosing the right tools. This is a senior role with real strategic weight. You'll shape how we make forward-looking IT decisions on integrations, platforms and tooling, drive the development of our IT operations, and help us navigate technology choices as we scale. At the same time, you're not afraid to get your hands dirty, when a new office needs screens, conference systems and a printer up and running, you're happy to make it happen. You take ownership, drive work forward independently, and work closely with the rest of the team on IT processes, security and regulatory work like GDPR and DORA. What you'll do Own IT operations for both central IT and our portfolio companies as they grow, from day-to-day support to being their long-term IT partner as their needs mature. Deliver hands-on IT setup and support to our portfolio companies: onboarding, tooling, office setup, meeting and conference systems. Drive a methodical, consolidated approach to software licenses, how we buy, manage and follow up on them, and manage the vendor relationships behind our IT portfolio. Make sure the services we buy actually deliver on our contracts, requirements and expectations. Be part of the team responsible for IT and cybersecurity, working hands-on with technical support and integrations and bringing a senior perspective. Build the operating model for how we scale IT support to new portfolio companies as we grow today it might be five companies, tomorrow twenty. Who you are A senior IT operations profile with broad, hands-on experience, comfortable being third-line support one moment and a strategic sparring partner the next. Experienced with Google Workspace and at least one major cloud platform (AWS or GCP). Structured and methodical in IT administration: licenses, vendors, agreements, follow-up. A relationship builder who enjoys being the face of IT toward colleagues and portfolio companies, proactive, approachable and service-minded. Project-oriented and self-driven, you can run initiatives end to end, but you're a doer at heart, not a pure project manager. Comfortable in a fast-growing environment where things change quickly and no task is too big or too small. Bonus points Experience with cybersecurity operations, endpoint monitoring (e.g. CrowdStrike), code scanning, or guiding developers on secure practices. A background close to development or IT product management, giving you an eye for how technical decisions play out over time. Why 0TO9? Shape a role and a function that's being built from the ground up. Real ownership from day one, no layers, no bureaucracy. Work directly with the companies in our portfolio and see your work enable their growth. Grow with us as we scale across Europe. Find out more at 0to9.com, we'd love to hear from you!

Shape the future of cyber security in Atlantic Container Line AB Atlantic Container Line AB (ACL), part of the Grimaldi Group, is the world's oldest continuously operating container line and has been connecting Europe and North America since 1967. Operating the world's largest combination container and Roll-on/Roll-off (RORO) vessels, ACL is a key link in global trade. As our business continues to evolve, information security plays an increasingly vital role in supporting operational resilience, customer trust and regulatory compliance. We are now looking for our first in-house Chief Information Security Officer (CISO) to lead the next phase of our security journey. The opportunity This is a unique opportunity to build and shape the information security function within an international organization operating critical infrastructure and global supply chains. As CISO, you will own and drive ACL's information security agenda, providing strategic leadership while also taking a hands-on role in developing governance, processes and security capabilities. You will partner closely with executive leadership, internal stakeholders and external partners to establish a modern, risk-based approach to security that supports both business growth and regulatory requirements. You will play a key role in ensuring compliance with NIS2 and other relevant frameworks, while helping the organization strengthen its cyber resilience, security culture and overall maturity. Joining ACL at this stage means you will not be starting from scratch. Foundational work has already been established together with experienced external partners, providing you with a solid platform from which to further develop and embed security across the business. Key responsibilities: Lead and continuously develop ACL's information security strategy and roadmap. Drive implementation and ongoing compliance with NIS2, GDPR and related regulatory requirements. Establish and maintain policies, governance frameworks, risk management processes and security controls. Act as a trusted advisor to senior management and business stakeholders on security, risk and compliance matters. Coordinate security initiatives across ACL and within The Grimaldi Group. Manage relationships with external security partners, auditors and regulatory bodies. Support incident response, business continuity and cyber resilience planning. Drive security awareness and help build a strong security culture throughout the organization. Who you are You are a security professional who enjoys creating structure, influencing stakeholders and translating complex security requirements into practical business solutions. You combine strategic thinking with a pragmatic, hands-on approach and are comfortable working across organizational boundaries. You may already hold a CISO position or be ready to take the next step from a senior information security, cyber security or governance role. We believe you have: Several years of experience within information security, cyber security, governance, risk management or compliance. Good understanding of regulatory and security frameworks such as NIS2, ISO 27001, NIST or similar, as well as GDPR. Experience leading projects and driving initiatives across multiple stakeholders. Ability to communicate effectively with both technical specialists and business leaders. Experience working in an international environment. Professional proficiency in both English and Swedish. The following are considered advantageous: Experience from critical infrastructure, transportation, logistics or other regulated industries. Knowledge of cloud environments such as Microsoft Azure or Oracle Cloud. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or similar. Why ACL? At ACL, you'll have the opportunity to make a genuine impact in a business that operates globally and plays an important role in international trade. You'll work closely with senior leadership, influence strategic decisions and help shape the future of security within a company where your expertise will matter from day one. We offer a collaborative international environment, short decision-making paths and the opportunity to build something lasting within a respected global organization. The position is based in Gothenburg and involves close collaboration with colleagues across Europe and North America. Some travel may be required. Recruitment process ACL is partnering with Ants Tech Recruiters in this recruitment. You’re welcome to reach out to Gabriella Hagström at [email protected] if you have any questions. As we're entering the summer holiday period, we'll continue the recruitment process in the middle of August. We look forward to your application. About ACL Atlantic Container Line AB, headquartered in Sweden, is part of the Grimaldi Group of Naples, Italy. Since 1967, ACL has operated continuous weekly transatlantic container and Roll-on/Roll-off (RORO) services between Europe and North America, making it the world's longest continuously operating container line. ACL operates the world's largest combination container and RORO vessels, among the world's greenest ships. Purpose-built with 100% cell-guides for containers above and below deck, as well as 100% underdeck RORO stowage, they offer a unique combination of efficiency and flexibility. Designed to accommodate cargo of virtually any size or weight, ACL's vessels transport everything from containers and vehicles to boats, aircraft, construction and agricultural equipment, and other oversized project cargo. With corporate teams based across Sweden, the UK, Belgium, Germany and the US, ACL combines global reach with specialist expertise to support customers with some of the world's most complex transportation needs.

Om oss Vi är en välfinansierad startup som bygger verktyg för att hjälpa samhället att stå emot och anpassa sig till säkerhetshot, naturkatastrofer, extremväder och andra risker. Vår plattform möjliggör simulering, scenarioplanering, incidenthantering och tidig varning och används i miljöer där tillgänglighet, robusthet och säkerhet är helt avgörande. Vi arbetar nära aktörer inom myndigheter och samhällskritisk infrastruktur, vilket innebär höga krav på både teknisk säkerhet och efterlevnad av regulatoriska krav. Om rollen Vi söker en Senior IT & Information Security Officer som vill vara med och bygga upp och utveckla säkerhetsarbetet i en verksamhet där säkerhet är en central del av affären. Det här är en senior och verksamhetsnära roll för dig som trivs i gränslandet mellan säkerhet, teknik och verksamhet. Som en av de första säkerhetsfunktionerna i bolaget får du stort mandat att påverka hur vi arbetar med informations- och IT-säkerhet. Rollen är hands-on och innebär att du själv driver och genomför stora delar av säkerhetsarbetet i nära samarbete med verksamheten. Du kommer att arbeta nära ledning, produkt och teknik i en miljö där regulatoriska krav, samhällsnytta och säkerhet går hand i hand. Exempel på arbetsuppgifter: Säkerställa efterlevnad av Säkerhetsskyddslagen, NIS2/Cybersäkerhetslagen och ISO 27001 Driva organisationens arbete inom informationssäkerhet, IT-säkerhet, riskhantering och incidenthantering Ansvara för informationsklassificering, informationsmärkning, säkerhetspolicyer och andra styrande dokument Etablera och leda incident- och krishanteringsprocesser samt fungera som primär kontaktpunkt mot relevanta myndigheter vid incidentrapportering Genomföra leverantörsbedömningar och due diligence-arbete med fokus på supply chain security Utveckla och genomföra utbildningsinsatser inom informations- och cybersäkerhet Rapportera säkerhetsläge, risker och efterlevnad till ledning och andra beslutsfattare Omsätta regulatoriska, operativa och säkerhetsrelaterade krav till produktstrategi, prioriteringar och verksamhetsförbättringar Om dig Du är en pragmatisk och handlingskraftig person som trivs i en roll där du kombinerar strategiskt tänkande med operativt genomförande. Du tar naturligt ägarskap, bygger förtroende hos olika intressenter och har förmågan att få med dig organisationen i säkerhetsfrågor. Du uppskattar miljöer där mycket fortfarande är under uppbyggnad och där du får möjlighet att påverka både arbetssätt och riktning. För att lyckas i rollen har du: Gedigen erfarenhet av arbete inom informationssäkerhet, IT-säkerhet eller säkerhetsstyrning Dokumenterad erfarenhet av att tillämpa Säkerhetsskyddslagen och NIS2/Cybersäkerhetslagen i praktiken Erfarenhet av att utveckla och implementera säkerhetsprocesser, styrmodeller och riskhanteringsarbete Erfarenhet av att arbeta i komplexa miljöer med många intressenter och höga krav på säkerhet och efterlevnad Förmåga att omsätta regulatoriska och verksamhetsmässiga krav till konkreta åtgärder och prioriteringar Flytande svenska och engelska i tal och skrift Erfarenhet av arbete enligt ISO 27001 samt certifieringar såsom CISSP, CISM eller motsvarande är meriterande. Vad vi erbjuder Konkurrenskraftig ersättning och långsiktig uppsida i ett bolag med stark tillväxt och ett tydligt samhällsnyttigt syfte. En flexibel arbetsmiljö med stort mandat att påverka, där du får möjlighet att bygga upp och utveckla säkerhetsarbetet i nära samarbete med ledning, produkt och teknik. Viktig information För slutkandidater genomför vi en fördjupad bakgrundskontroll via en extern leverantör. Rollen omfattas av säkerhetsprövning.