Senior Security Engineer

Tibber; Stockholms kommun; On-site; SEK 1,100,000 - 1,500,000; Full time

Job summary

Tibber, a forward-thinking energy platform, is seeking a Senior Security Engineer to secure the platform powering the energy transition for hundreds of thousands of homes. You’ll be the technical backbone, embedding security into product development and driving secure, scalable architectures across cloud and Kubernetes.

Join a team that translates ISO 27001, NIS2 and NIST CSF into concrete controls, builds automated evidence, and trains others to put security first.

Qualifications

• Hands-on security engineering in a modern cloud-native company.
• Experience with AWS and Kubernetes security controls.
• Ability to translate frameworks like ISO 27001, NIS2 into technical controls.
• Willingness to grow with AI-enabled tooling.

Responsibilities

• Secure the platform: own security posture of cloud infrastructure and Kubernetes platform.
• Embed security in product development: threat modelling, secure design reviews, code and container scanning, remediation.
• Turn compliance into engineering: implement ISO 27001, NIS2, and NIST CSF controls with automated evidence.
• Raise the bar on corporate IT security: strengthen identity provider, endpoint management, SaaS integrations, office networks.
• Own incident response for the technical estate: runbooks, investigations, containment, learnings.
• Share knowledge and champion security culture across the company.

Skills

Security engineering experience

Cloud-native security

Kubernetes security

Automation & IaC

Threat modelling

Tools

AWS

Kubernetes

CI/CD pipelines

Infra as code

Job description

We're at a pivotal moment for both Tibber and the planet. When joining Tibber, you won't just help scale a forward-thinking tech company - you'll contribute to a real shift in how people consume electricity. With millions of smart devices connected to the Tibber platform (like electric vehicles and smart thermostats), we have one of the most unique energy trading portfolios on the market.

We're looking for a Senior Security Engineer to join us in making the energy transition happen - maybe that's you?

Job Mission

As a Senior Security Engineer, you'll play a key role in securing the platform that powers the energy transition for hundreds of thousands of homes. You'll be the technical backbone of our security posture - building controls, embedding security into how we build products, and making sure our engineers default to secure.

What you'll do

• Secure the platform. Own the security posture of our cloud infrastructure and Kubernetes platform - identity and access, network segmentation, secrets management, encryption, workload hardening, logging, alerting and detection. Build guardrails so secure is the default path for our engineers.

• Embed security in how we build products. Partner with product teams on threat modelling and secure design reviews. Run and tune code, dependency and container scanning through to remediation, and coordinate external penetration tests.

• Turn compliance into engineering. Implement the technical controls behind our ISO/IEC 27001, NIS2 and NIST CSF work, automate evidence collection, and translate requirements into backlog items engineers can act on.

• Raise the bar on corporate IT security. Strengthen the security configuration of our identity provider, endpoint management, SaaS integrations and office networks.

• Own incident response for the technical estate. Maintain and exercise runbooks, lead technical investigation and containment, and drive learnings back into the platform.

• Make the whole company better at security. Share knowledge, run workshops and champion a culture where security is everyone's concern and never a blocker for its own sake.

What we're looking for

You are driven by impact and know how to turn strategy into execution. You're used to fast-paced environments and thrive when given clear goals and high accountability. We believe you'll thrive here if you:

• Have hands-on security engineering experience in a modern, cloud-native software company - and have seen what scale and growth do to a security posture.

• Are deeply comfortable in at least one major cloud(preferably AWS) and with Kubernetes, infrastructure as code and CI/CD pipelines. You can read and write code and would rather automate a control than document a manual one.

• Know the practical security toolset - identity federation, secrets management, logging, vulnerability management and backup and recovery - and understand the trade-offs between options.

• Have translated frameworks like ISO 27001, NIS2 or SOC 2 into concrete technical controls and audit evidence, including running threat modelling with product teams.

• Are excited about how Tibber becomes more AI-enabled and embrace new tools and ways of working. You don't need to be an expert, but we believe you are motivated by that and excited to grow with it too.

The Tibber Mindset

Tibber exists to drive energy independence - away from fossil dependency. Our tech helps hundreds of thousands of households shift their electricity consumption to more sustainable and affordable hours - from electric vehicles to smart thermostats, all connected to the Tibber platform. We strengthen the resilience of the grid. Not in theory. In everyday life.

We win, fail, and grow together, staying curious and pushing for better every day. AI is shaping how we work - and we're on a journey to make it central to everything we do. The further we go, the more our Tibberinos matter - and yes, that's what we call ourselves!

Started by two founders in 2016. Now 300+ Tibberinos across Stockholm, Oslo, Berlin, Amsterdam, and Førde. And we're still just getting started.

You're welcome at Tibber for who you are. We hire for what you can do and how you think - not your background or where you've been. Diverse teams build better products, and we mean that.