(Senior) Cloud Security Engineer

Puzzel; Stockholms kommun; Hybrid; SEK 900,000 - 1,100,000; Full time

Job summary

Puzzel is appointing a senior security engineer to protect our public clouds (Azure/AWS) and private data centers, driving vulnerability management across the estate and helping design secure architectures.

You will work with the CISO and engineering teams to implement robust controls, monitor threats, and continuously improve security posture in a hybrid setup.

Qualifications

• Hands-on infrastructure security in private data centre and cloud environments.
• Experience with Azure and AWS security controls.
• Knowledge of security frameworks and secure design.

Responsibilities

• Own security of public cloud and data centre estate.
• Design, implement, operate, and improve security controls.
• Lead vulnerability management across the stack from detection to remediation.

Skills

Threat hunting

Threat modelling

Vulnerability management

Networking

Tools

Tenable

Snyk

VMware

Hyper‑V

Job description

About Puzzel

We're the AI-native customer experience platform built in Norway, trusted across Europe, and growing fast. For 25 years we've helped contact centres deliver faster, more human service — without the clutter or complexity. Today we're #1 in the Nordics, scaling rapidly in the UK and the Netherlands, with one ambition: become Europe's clear CX market leader.

Sweden, Denmark, Norway or Bulgaria

Puzzel Values

• Built on Trust — our Nordic foundation. Customers, partners, and each other.
• Stronger Together — one team, one purpose, shared wins.
• Stay Hungry — we raise our game every day.

What you'll do

Puzzel is investing in its security function. This role owns the security of our public cloud (Azure and AWS) and private data centre estate, and owns infrastructure vulnerability management across the company. This role focuses on designing, implementing, operating, and continuously improving security controls that protect our product. This role reports to the CISO.

What You Will Own

• The security of our public cloud (Azure and AWS) and private data centre estate: network segmentation, firewall policy, system hardening and patching.
• Infrastructure vulnerability management end to end — scope, triage, remediation tracking and closure. Tenable is one of the tools you will use; owning the outcome matters more than owning the tool.
• Threat modelling and secure design input for infrastructure change, offered as support rather than imposed as a gate.

What you must be able to do

• Threat hunting
• Threat modelling
• Vulnerability management
• Networking

The must haves

• Hands-on infrastructure security in private data centre environment
• Hands-on cloud security experience in Azure, AWS or both
• Deep network security expertise: Firewall, VLANs, segmentation, WAF, TLS/mTLS, VPN, workload and configuration security, and system hardening.
• Virtualisation platforms - VMware, Hyper‑V, Nutanix or similar.
• Kubernetes or equivalent orchestration.
• Application security testing and OWASP or similar frameworks.
• SOC and SIEM or any infrastructure security monitoring platforms.
• Cloud security posture management tooling.
• Vulnerability scanning tools, SAST, DAST and SCA (including, Tenable, Snyk or similar tools).
• Experience turning scanner and dependency findings into prioritized, tracked and closed work.

The nice to haves

• Terraform, Bicep or similar tools for Infrastructure as Code (IaC).
• Proficiency in programming languages, such as, .NET, Python, Ruby.
• An offensive security mindset; penetration testing or red team experience is a strong advantage.
• AI / Agentic security.
• Exposure to ISO 27001, SOC 2, NIS2 or DORA.
• Experience in SaaS, or in a regulated environment.
• Certifications such as OSCP or CREST, CISSP or CCSP, and vendor credentials in VMware, Nutanix or Cisco, or Azure or AWS, are welcome but not required.

The location

This role can be located in our offices in Sweden, Denmark, Norway or Bulgaria, with expectation of 2-3 days/week in the office.

What To Expect From The Interview Process

• Screening call with Talent Acquisition
• 1st interview with Hiring Manager - CISO
• 2nd interview with Product & Technology Lead
• Final interview with Chief Technology Officer

Diversity & Inclusion

We want everyone at Puzzel to feel able to be their true, authentic self at work – regardless of nationality, race, ethnicity, religion, sexual orientation, gender identity, physical ability, age or economic background.

We're proud of our diverse, global workforce, but there's more to do. Our current gender split is 25% female to 75% male – in line with the SaaS average, but not where we want to be. Here's how we're improving it:

• Our C-suite has moved from 100% male in 2023 to a 5:3 male-to-female split today.
• Female hires grew from 23.6% in 2021 to 41% in 2024, dipping to 34% in 2025 — a trend we watch closely, but never treating as a tick-box exercise.
• We partner with Flexa, to compound our aspiration to attract a diverse talent pool.
• We work with state employment initiatives in Norway and Sweden on internship and apprenticeship routes, to help early-years talent into the workforce.

One Last Thing

We're unable to offer sponsorship for this role, so you'll need existing eligibility to work in the country you're applying to.