Junior Threat Intelligence Analyst

Nordic Investin Group Aktiebolag; Stockholms kommun; On-site; SEK 420,000 - 540,000; Full time

Job summary

Nordic Investin is recruiting a Junior Threat Intelligence Analyst on behalf of one of our partner companies. You will connect OSINT, threat frameworks and indicator analysis to deliver actionable intelligence for security operations and risk teams.

You will work directly with the people who design, operate and depend on the systems being protected. Recommendations must identify the threat, the affected asset and a realistic implementation path, with careful evidence and clear escalation when

Qualifications

• Experience delivering actionable threat intelligence for security operations and risk teams.
• Strong knowledge of OSINT and threat frameworks.
• Experience applying indicator analysis and reporting.
• Ability to assess risk, priorities and trade-offs involving scripting.
• Clear stakeholder communication and end-to-end ownership.
• Professional English for business-critical information handling.

Responsibilities

• Own the practical direction for actionable threat intelligence for security operations and risk teams.
• Translate goals and constraints into a clear approach for OSINT and threat frameworks.
• Establish useful standards, routines or artefacts around indicator analysis.
• Coordinate stakeholders and dependencies affecting reporting.
• Use evidence and measurable outcomes to improve scripting.
• Strengthen knowledge sharing, decision quality and sustainable ownership across the team.

Skills

Threat intelligence

OSINT

Indicator analysis

Threat frameworks

Scripting

Communication

Job description

Nordic Investin is recruiting a Junior Threat Intelligence Analyst on behalf of one of our partner companies. You want architecture, delivery and production behaviour to agree, and you turn difficult constraints into systems that teams can operate and improve.

The partner is strengthening its capability in actionable threat intelligence for security operations and risk teams. You will take responsibility for work that connects OSINT, threat frameworks and indicator analysis, while ensuring that reporting and scripting receive appropriate discipline. The objective is progress that colleagues can use and leaders can evaluate.

The environment suits someone who tests assumptions early, documents trade-offs and treats operability as part of the design.

How you will work

You will work directly with the people who design, operate and depend on the systems being protected. Recommendations must identify the threat, the affected asset and a realistic implementation path. The partner values careful evidence, proportionate controls and clear escalation when risk cannot be removed immediately.

This role calls for strong foundations, curiosity and the discipline to learn quickly. You will be expected to recognise when a decision needs wider expertise, make trade-offs visible and move work forward without creating unnecessary process.

What you will do

• Own the practical direction for actionable threat intelligence for security operations and risk teams.

• Translate goals and constraints into a clear approach for OSINT and threat frameworks.

• Establish useful standards, routines or artefacts around indicator analysis.

• Coordinate stakeholders and dependencies affecting reporting.

• Use evidence and measurable outcomes to improve scripting.

• Strengthen knowledge sharing, decision quality and sustainable ownership across the team.

What you will bring

• Relevant experience delivering actionable threat intelligence for security operations and risk teams in a demanding environment.

• Strong working knowledge of OSINT and threat frameworks.

• Practical experience applying indicator analysis and reporting.

• Ability to assess risk, priorities and trade-offs involving scripting.

• Evidence of clear stakeholder communication and dependable end-to-end ownership.

• Professional English and the judgement to work with sensitive or business-critical information.

Experience that would add value

• Experience from security operations centres or managed security services.

• Exposure to case management in a cross-functional environment.

• Swedish language skills or experience working across Nordic organisations.

A background that can succeed here

Your background may be product engineering, platform work, enterprise technology or consulting. What matters is technical depth connected to user and business consequences. Direct experience of actionable threat intelligence for security operations and risk teams is valuable, while adjacent experience counts when it shows transferable judgement.

What makes the opportunity interesting

The attraction is meaningful ownership in an environment where sound judgement changes both the solution and the decisions around it. The focus on actionable threat intelligence for security operations and risk teams gives the role a clear mission and room to influence priorities and measures of success.

The exact partner, employment model, compensation, start date and working arrangement will be explained openly during the process. Nordic Investin will make sure you understand the opportunity before asking you to make a decision.

The recruitment conversation

Nordic Investin will focus on decisions you have made: the context, alternatives, result and what you would change today. You will also have room to test whether the role and partner environment are right for you.