Security Analyst specializing in Operational Technology (OT)

Orange Cyberdefense Sweden AB; Stockholms kommun; On-site; SEK 550,000 - 750,000; Full time

Job summary

Orange Cyberdefense is seeking a Security Analyst to protect client environments against cyber threats. You will analyze security incidents, monitor OT environments, and collaborate with customers to define remediation actions.

The role emphasizes proactive threat hunting, rule development, and ongoing improvement of security operations. You will work with leading security platforms, contribute to incident response, and ensure high-quality reporting for diverse international clients.

Qualifications

• Post-secondary education or professional experience in cybersecurity, digital forensics, or network security.
• Experience as a Security Analyst is an advantage.

Responsibilities

• Monitor and investigate security alerts using SIEM platforms (e.g., Splunk, Microsoft Sentinel).
• Manage OT security visibility and present findings for continuous improvement.
• Analyze and mitigate threats using EDR and XDR platforms.
• Act as Technical Delivery Manager for assigned customers, delivering monthly reports and maintaining environments.
• Independently evaluate security events and determine appropriate response actions.
• Document incident timelines and investigation findings.
• Advise customers on security incidents and remediation actions.
• Perform proactive threat hunting and develop/refine detection rules.
• Improve processes and design new operational procedures.
• Contribute to the threat intelligence database and IOCs.
• Expand technical expertise through training and professional development.
• Configure, manage, and maintain log management platforms (Splunk, Microsoft Sentinel).
• Deploy infrastructure and install components for new customer environments.
• Provide customer support, onboarding and troubleshooting for SIEM solutions.

Job description

As a Security Analyst, you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work, you will have access to a range of SIEM, SOAR, and XDR platforms. In this role, you will proactively and reactively defend our customers against cyberattacks.

In addition, you will be involved in a growing Operational Technology (OT) security area, where your responsibilities will include monitoring and analyzing security alerts from OT environments.

Key Responsibilities

• Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel).

• Manage solutions that provide customers with visibility into their OT environments, including presenting findings and leading continuous improvement initiatives.

• Analyze and mitigate threats using EDR and XDR platforms.

• Act as a Technical Delivery Manager for assigned customers, serving as their primary technical point of contact, delivering monthly reports, and maintaining customer environments.

• Independently evaluate security events and determine appropriate response actions.

• Document incident timelines and investigation findings.

• Advise customers on security incidents and recommended remediation actions.

• Perform proactive threat hunting.

• Develop and refine detection rules.

• Improve existing processes and design new operational procedures.

• Contribute to our internal threat intelligence database and indicators of compromise (IOCs).

• Continuously expand your technical expertise through training and professional development.

• Configure, manage, and maintain log management platforms (Splunk and Microsoft Sentinel).

• Deploy infrastructure and install components for new customer environments.

• Provide customer support, onboarding, and troubleshooting for SIEM solutions.

Why Join Orange Cyberdefense?

• Become part of one of the cybersecurity industry's leading organizations, working with market-leading technologies.

• Join a collaborative, low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the company's direction.

• Work in an environment that values curiosity, autonomy, knowledge sharing, and continuous learning.

• Help secure major international organizations against evolving cyber threats.

• Benefit from excellent opportunities for professional development and specialization.

About Orange Cyberdefense

Orange Cyberdefense is Sweden's leading cybersecurity company, with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services, ranging from highly technical solutions such as Security Operations Centers (SOC), firewall solutions, technical threat intelligence, vulnerability management, and SIEM, to governance, risk management, and security strategy consulting.

We are a global team of approximately 3,000 colleagues, including 400 employees in Sweden.

At Orange Cyberdefense, diversity is one of our greatest strengths. We believe that different backgrounds, experiences, and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process.

Who We Are Looking For

We are looking for someone with post-secondary education or professional experience in cybersecurity, digital forensics, or network security. Previous experience in a similar Security Analyst role is considered an advantage.

As a person, you are courageous, curious, and trustworthy. You build confidence with customers, contribute to the company's success, and collaborate effectively with colleagues. You are able to gather and assess information, distinguish critical details from noise, build a comprehensive understanding of security events, and communicate your findings clearly to both technical and non-technical audiences.

We value curiosity, creativity, independence, and initiative even more than complete expertise.

For this particular team, you will work with public sector customers, meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English, spoken and written, is also required.