Security Engineer

Strawberryhotels; Stockholms kommun; Hybrid; SEK 600,000 - 800,000; Full time

Benefits offered by this job

Great employee discounts at all hotels

Continuous opportunities for growth and development

Vibrant work environment with team-building events

Flat organization built on trust and empowerment

Hybrid model with flexibility for working days

Job summary

Strawberryhotels in Stockholm is looking for a Security Engineer to strengthen our security posture. You will conduct security reviews, collaborate with teams, and manage incidents.

A successful candidate must have hands-on experience in cybersecurity and the ability to communicate security risks effectively. The role offers hybrid work flexibility with a dynamic team environment.

Join us to contribute directly to our transformation and enjoy fantastic employee discounts at our hotels!

Qualifications

• Proven experience in information security, cyber security or similar role.
• Experience conducting security reviews, risk assessments, or security testing.
• Familiarity with security frameworks and regulations like ISO 27001, GDPR, PCI-DSS.
• Strong understanding of governance, risk, and compliance principles.
• Knowledge of network security and modern security practices.

Responsibilities

• Support projects with security guidance and security-by-design principles.
• Conduct security reviews and risk assessments of applications and services.
• Investigate security incidents with internal teams and partners.
• Analyze security events to improve detection capabilities.
• Drive vulnerability management and reporting.

Skills

Strong communication skills in English and either Swedish or Norwegian

Collaborative approach to solving security challenges

Curiosity and initiative in cybersecurity

Ability to explain security risks to technical and non-technical stakeholders

Tools

SIEM platforms

Job description

As a Security Engineer, you'll join our central security team and work hands‑on to strengthen our security posture across the organization. You'll help identify risks, investigate security incidents, review new solutions, and work closely with technology teams to ensure security is built into everything we do.

What You'll Do

Support projects and technology teams with security guidance and security‑by‑design principles.

Conduct security reviews and risk assessments of applications, platforms, integrations, and third‑party services.

Investigate and coordinate security incidents together with our MDR provider and internal teams.

Monitor and analyze security events through our SIEM platform and help improve detection capabilities.

Drive vulnerability management activities, including prioritization, remediation follow‑up, and reporting.

Help develop and improve security controls aligned with frameworks such as ISO 27001, GDPR, PCI‑DSS and the EU AI Act.

Contribute to security awareness initiatives and help promote a strong security culture across Strawberry.

What You'll Bring

Strong communication skills in English and either Swedish or Norwegian.

A practical and collaborative approach to solving security challenges.

The ability to explain security risks and recommendations to both technical and non‑technical stakeholders.

Curiosity, initiative, and a genuine interest in cybersecurity.

What You'll Need

Proven experience in information security, cyber security, or a similar security‑focused role.

Experience conducting security reviews, risk assessments, or security testing activities.

Experience with incident response, security monitoring, or vulnerability management.

Familiarity with SIEM platforms and security operations processes.

Strong understanding of governance, risk, and compliance principles.

Understanding of network security, identity and access management (IAM), and modern security practices.

Knowledge of security frameworks and regulations such as CIS Controls, ISO 27001, GDPR, PCI‑DSS, NIS2, or the EU AI Act.

Nice to Have

Experience with security architecture reviews.

Experience with software security (DevSecOps)

Experience working with MDR or SOC providers.

Knowledge of cloud security and modern SaaS environments.

Experience with third‑party risk management.

Familiarity with disaster recovery and business continuity planning.

What We Offer

• Real Impact: Be part of a dynamic transformation and contribute directly to our success story.
• Empowerment: Work in a flat organization built on trust, autonomy, and the power of individual initiative.
• Growth & Development: Continuous opportunities to enhance your skills and advance your career.
• Fun & Community: A vibrant work environment with plenty of social events and team‑building.
• Fantastic Perks: Great employee discounts (staff/friends/family rates) at all our hotels.
• Hybrid Flexibility: Enjoy the best of both worlds with our hybrid model (three days in‑person at our Oslo or Stockholm HQ).

Please note: We do not offer fully remote positions. Candidates must be located in, or willing to relocate to, Oslo or Stockholm.

We promote equal rights above all and are proud sponsors of Pride. Regardless of your ethnicity, gender, religious beliefs, disabilities or age - our doors are always open.