Security Analyst specializing in Operational Technology (OT)

Orange Cyberdefense; Sweden; On-site; SEK 650,000 - 950,000; Full time

Job summary

Orange Cyberdefense, Sweden's leading cybersecurity company, is seeking a Security Analyst to protect customers against cyber threats. You will identify security incidents, escalate when necessary, and work with SIEM, SOAR, and XDR platforms.

You will also monitor OT security and contribute to continuous improvement across environments. Responsibilities include monitoring alerts, acting as Technical Delivery Manager for customers, and developing detection rules while expanding expertise through

Qualifications

• Post-secondary education or professional experience in cybersecurity or related field.
• Strong ability to gather and assess information and communicate findings clearly to technical and non-technical audiences.
• Professional fluency in English and Swedish; Swedish citizenship may be required for certain security clearances.

Responsibilities

• Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel).
• Act as Technical Delivery Manager for assigned customers, delivering monthly reports and maintaining customer environments.
• Develop and refine detection rules and improve security processes.
• Provide customer support, onboarding, and troubleshooting for SIEM solutions.

Skills

Cybersecurity knowledge

Analytical thinking

Threat hunting

Customer communication

English proficiency

Tools

SIEM Splunk

Microsoft Sentinel

EDR/XDR platforms

Threat intel databases

Job description

As a Security Analyst, you will protecting our customers against cyber threats and IT security attacks. You will be responsible for identifying and analyzing potential security incidents and escalating them to our customers when necessary. To support your work, you will have access to a range of SIEM, SOAR, and XDR platforms. In this role, you will proactively and reactively defend our customers against cyberattacks.

In addition, you will be involved in a growing Operational Technology (OT) security area, where your responsibilities will include monitoring and analyzing security alerts from OT environments.

Key Responsibilities

• Monitor and investigate security alerts using SIEM platforms (Splunk and Microsoft Sentinel).
• Manage solutions that provide customers with visibility into their OT environments, including presenting findings and leading continuous improvement initiatives.
• Analyze and mitigate threats using EDR and XDR platforms.
• Act as a Technical Delivery Manager for assigned customers, serving as their primary technical point of contact, delivering monthly reports, and maintaining customer environments.
• Independently evaluate security events and determine appropriate response actions.
• Document incident timelines and investigation findings.
• Advise customers on security incidents and recommended remediation actions.
• Perform proactive threat hunting.
• Develop and refine detection rules.
• Improve existing processes and design new operational procedures.
• Contribute to our internal threat intelligence database and indicators of compromise (IOCs).
• Continuously expand your technical expertise through training and professional development.
• Configure, manage, and maintain log management platforms (Splunk and Microsoft Sentinel).
• Deploy infrastructure and install components for new customer environments.
• Provide customer support, onboarding, and troubleshooting for SIEM solutions.

Why Join Orange Cyberdefense?

• Become part of one of the cybersecurity industry\'s leading organizations, working with market-leading technologies.
• Join a collaborative, low-hierarchy Challenger culture where initiative is encouraged and you can influence both your own development and the company\'s direction.
• Work in an environment that values curiosity, autonomy, knowledge sharing, and continuous learning.
• Help secure major international organizations against evolving cyber threats.
• Benefit from excellent opportunities for professional development and specialization.

About Orange Cyberdefense

Orange Cyberdefense is Sweden\'s leading cybersecurity company, with a vision of building a digitally secure Sweden. We provide a broad portfolio of cybersecurity services, ranging from highly technical solutions such as Security Operations Centers (SOC), firewall solutions, technical threat intelligence, vulnerability management, and SIEM, to governance, risk management, and security strategy consulting.

We are a global team of approximately 3,000 colleagues, including 400 employees in Sweden.

At Orange Cyberdefense, diversity is one of our greatest strengths. We believe that different backgrounds, experiences, and perspectives enable us to create better security solutions for all our customers. We are committed to ensuring that every applicant is treated fairly and equally throughout the recruitment process.

Who We Are Looking For

We are looking for someone with post-secondary education or professional experience in cybersecurity, digital forensics, or network security. Previous experience in a similar Security Analyst role is considered an advantage.

As a person, you are courageous, curious, and trustworthy. You build confidence with customers, contribute to the company's success, and collaborate effectively with colleagues. You are able to gather and assess information, distinguish critical details from noise, build a comprehensive understanding of security events, and communicate your findings clearly to both technical and non-technical audiences.

We value curiosity, creativity, independence, and initiative even more than complete expertise.

For this particular team, you will work with public sector customers, meaning Swedish citizenship is required in order to complete the mandatory security clearance process. Professional fluency in both Swedish and English, spoken and written, is also required.

Department CyberSOC Locations Stockholm Required languages English, Swedish