Operational Threat Intelligence Analyst to CSIRT | SEB, Solna

SEB; Pargas; On-site; EUR 60,000 - 90,000; Full time

Job summary

SEB is expanding its Operational Security Center with a Threat Intelligence Analyst to strengthen real-time defenses. You will translate intelligence into actionable guidance for security operations and collaborate with CSIRT and threat teams to detect and respond to emerging threats.

The role requires a security background, knowledge of MITRE ATT&CK, and fluency in Swedish and English. You will contribute to incident response, threat hunting, and the development of intelligence-driven scenarios

Qualifications

• Bachelor’s degree in Computer Science or a related field.
• Understanding of threat intelligence frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Knowledge of threat actor methodologies and the cyber threat intelligence lifecycle.
• Fluency in Swedish and English.

Responsibilities

• Produce actionable operational and tactical threat intelligence insights for SEB Group.
• Support security operations by identifying emerging cyber threats.
• Collaborate with strategic threat intelligence and CSIRT teams.
• Identify critical security questions and provide actionable recommendations.
• Monitor data breach indicators affecting SEB and third parties.
• Assist incident response and security engineering with deep threat analysis.
• Conduct threat hunting and improve incident response services.
• Collaborate with partners, vendors and other sectors on Threat Intelligence.
• Foster continuous development of Threat Intelligence services.

Skills

Threat analysis

Intelligence analysis

Communication

Education

Bachelor’s degree in Computer Science or related field

Job description

SEB is more than just a bank with a technology function. We are a progressive tech company powered by innovation and fueled by collaboration. From COBOL to AI and everything in between, we offer you an impressive tech stack and several technology paths. Together we’re innovating for a sustainable society and building the tech arena of the future, a welcoming space for everyone.

My name is Henrik Brevenius, and I lead the CSIRT and Operational Threat Intelligence team at SEB. We are currently looking to expand our team with a new Operational Threat Intelligence Analyst.

About the job

The OSC (Operational Security Center) department consists of several functions, including Security Incident Response (CSIRT), Threat Intelligence, Penetration Testing, Vulnerability Management, and Security Engineering.

Primary responsibilities

• As a Threat Intelligence Analyst, you will help produce actionable operational and tactical threat intelligence insights that are relevant to SEB Group.
• Your work will support immediate and near-term security operations by identifying and addressing emerging cyber threats.
• Collaborate with the strategic threat intelligence team.
• Identify critical security questions and provide actionable recommendations based on threat intelligence insights.
• Maintain operational situational awareness to detect potential threats and vulnerabilities impacting SEB.
• Monitor indicators of data breaches or attacks on SEB and its third parties.
• Collaborate closely with CSIRT and management during incidents to ensure appropriate actions are taken and validated.
• Offer support in Incident Response and Security Engineering, providing in-depth analysis of how threat actors may impact SEB’s IT infrastructure.
• Conduct Threat Hunting.
• Foster collaboration with partners, vendors, and other critical sectors regarding Threat Intelligence.
• Contribute to the continuous improvement and development of our Incident Response and Threat Intelligence services.

Who are we looking for?

• We are seeking team members who bring a diverse range of experiences and perspectives to SEB
• You are an experienced and inspiring team member with a strong security background, particularly in cybersecurity, with experience in threat analysis and/or intelligence analysis.
• You understand the value of intelligence-driven approaches to support security operations and can translate your insights into practical outcomes.
• You are thorough, analytical, and able to communicate effectively with different stakeholders.
• We value integrity, a collaborative spirit, and a positive attitude in our team, as we continuously work together to strengthen SEB’s security.
• You possess a positive attitude, high integrity, and the ability to foster cooperation in the continuous and collective tasks needed to strengthen SEB’s security.
• In general, we seek someone with a solid technical IT security background, a deep understanding of the entire cybersecurity field, and the ability to relate it to known and emerging threats. Alternatively, a fast learner with analytical mindset with interest in growing into the Cybersecurity field.

Skills/Qualifications

• Bachelor’s degree (BA/BS) in Computer Science or a related field
• Understanding of threat intelligence frameworks such as MITRE ATT&CK and the Cyber Kill Chain
• Knowledge of the methodology and mindset of modern cyber threat actors and the cyber threat intelligence lifecycle
• Fluency in Swedish and English

Desirable Skills

• Professional qualifications such as GCTI, CTIA, CISSP, CISA, CISM certifications is an advantage
• Understanding of industry regulations, standards, and best practices such as FI FFFS, NIST, ISO 27001, DORA, and PCI-DSS
• Practical experience in developing intelligence-driven threat scenarios
• Experience in automation and data visualization
• Security Engineering
• Tooling and scripting

Do you want to be part of SEB?

It is our fundamental belief that inclusion and diversityiscrucialforour future success. We strive to have an inclusive, value-driven culture where employees feel valued, respected, and involved irrespective of who they are, what they believe or where they come from.

Learn more about working at SEBon our Career website or through our Career podcasts.

sebgroup.com/career

bit.ly/SEBcareer

Please be aware that our final candidates undergo background checks, a process thatincludesforexampleidentity control, verification of qualifications, credit checks, companyengagementsand history of crime. In some cases, we also apply random drug checks. During employment, employees within SEB can also expect to undergo recurring background checks.

SEB Sweden has a redeployment responsibility, which means that this position might be covered by internal redeployment.