{"data":{"id":164270,"slug":"2-cyberforsvarsforbandet-soker-incident-response-specialist","type":"job","title":"Senior Incident Response Specialist - 2nd Cyber Defence Battalion","description":"The Swedish Armed Forces is in an expansion phase and on a comprehensive growth journey. The Armed Forces' cyber defense is an integrated part of military defense and constitutes a military-strategic resource. Cyber defense has the capability to conduct offensive and defensive cyber operations as well as to detect, identify, and neutralize threats from the most qualified actors. The effects of a cyberattack can have equally significant consequences for critical societal functions as a conventional armed attack.\n\nDo you want to protect Sweden and our right to live as we choose in a digitalized world? Over the internet, attacks on computers and servers worldwide are occurring at an increasingly large scale. The effects of a cyberattack can have equally significant consequences for critical societal functions as an armed attack. The Swedish Armed Forces as an authority is in constant development, where our main task is to protect Sweden's inviolable freedom. We are prepared to do what is required, even in the most difficult of times. The 2nd Cyber Defence Battalion is therefore seeking a senior incident response specialist. If you have an analytical mindset and have worked for several years handling incidents in both public and isolated environments, then this position is for you.\n\nMain Responsibilities\nWithin Cyber Defense, we always want to be at the forefront of innovation and through our actions contribute to a more secure Sweden. In this role, you will have the opportunity to drive and develop cyber defense's capability to conduct incident management. In the role, you will also contribute to developing technical solutions to meet cyber defense's unique needs, which may involve method, technology, and tool development. The tasks we face as a team must be solvable both in peace and war, whereby physical training is a natural part of the work duties (the employer provides 3 hours per week for physical training).\n\nAs a senior incident handler, you will work with:\n- Developing methods for incident handling in both public and isolated environments.\n- Implementing, administering, and improving incident management methods.\n- Guidance and mentoring of junior staff members.\n\nQualifications\n- Higher education in IT or equivalent knowledge that the employer finds relevant.\n- Documented work experience in relevant field for at least 5 years.\n- Class B driver's license.\n\nMeritorious\n- Completed military basic training\n- Experience working with IT infrastructure, both public and isolated environments.\n- Experience working in incident response.\n- Knowledge and experience in CTI and detections.\n- Well familiar with MITRE ATT&CK\n\nSkills within:\n- Network traffic\n- Malware analysis (primarily triage)\n\nPersonal Qualities\nWe see that you as an applicant have a high security awareness. We place great importance on you as an applicant having qualities such as creativity and solution orientation. You are curious and keep yourself updated within your field of work. You have an ease for collaboration and value the strength of working as a team toward common goals. To thrive and be part of the team, you need to be unpretentious, have the drive to solve challenges with incomplete information, and to maintain Sweden's security.\n\nWhat We Offer You\nAn important and stimulating job where you contribute to Sweden's security. Within the Swedish Armed Forces' cyber defense, you are offered continuous professional development so that you can further develop in your role and gain the prerequisites required to succeed in your assignment. The work also includes continuous basic military capability, as our personnel hold combatant status. Those without military basic training will undergo the Swedish Armed Forces' general training (AMU) to obtain basic understanding of military operations and personal skills. A workplace characterized by strong camaraderie and with great focus on balance between work and private life.\n\nOther Requirements: You should not tell other people than your immediate contacts that you have applied for a position at the 2nd Cyber Defence Battalion. The reason we ask you to be discreet with the information is that there are positions at the battalion covered by confidentiality. Employment with the Swedish Armed Forces requires Swedish citizenship. Employment entails national and international service obligations. The position has combatant status, which means you must be able to handle and use weapons. You will receive this training from us. A security clearance with background check will be conducted before employment. The selection process will be supplemented with work psychological tests.\n\nEmployment Type: Permanent position, 6-month probationary period applies if you are not currently employed by the Swedish Armed Forces\nWork Location: Link\u00f6ping\nStart Date: By agreement\n\nIf you want to know more about the position, you are welcome to contact us at: 2.cff-rekrytering@mil.se\nWelcome to submit your application no later than August 9. Your application must include a CV and a cover letter where you describe in what way you meet our requested requirements. Applications are sent to: 2.cff-rekrytering@mil.se, state reference 32112 in your application. NOTE! The application instructions below are incorrect, use the email instead.\nApplications for this position will only be accepted via the Swedish Armed Forces website.\n\nInformation about the recruiting battalion: The Armed Forces Headquarters contains the Commander-in-Chief and the Director General. The Headquarters has approximately 1,000 employees \u2013 both professional officers and civilian experts. The Headquarters has consisted as of January 1, 2023, of the Defense Staff, Operations Command, Military Intelligence and Security Service, and the Headquarters Staff Division and independent supervisory units. Employment with us involves placement in a security classification. Swedish citizenship is usually required. A security clearance with background check will be conducted before employment according to Chapter 3 of the Security Protection Act. Employment entails an obligation to be mobilized for war. Employment also includes an obligation to serve abroad. The meaning of this varies depending on the type of position. A CV and cover letter must be attached to the application for employment. If you proceed in the employment process, certified copies of grades and certificates must always be presented. Calls from external recruitment firms and salespeople are not welcome.","language":"sv","is_translated":true,"title_original":"2. Cyberf\u00f6rsvarsf\u00f6rbandet s\u00f6ker incident response specialist","description_original":"F\u00f6rsvarsmakten befinner sig i en expansionsfas och p\u00e5 en omfattande tillv\u00e4xtresa. F\u00f6rsvarsmaktens cyberf\u00f6rsvar ing\u00e5r som en integrerad del i det milit\u00e4ra f\u00f6rsvaret och utg\u00f6r en milit\u00e4rstrategisk resurs. Cyberf\u00f6rsvaret har f\u00f6rm\u00e5ga att genomf\u00f6ra offensiva och defensiva cyberoperationer samt att uppt\u00e4cka, identifiera och avv\u00e4rja hot fr\u00e5n de mest kvalificerade akt\u00f6rerna. Effekterna av en cyberattack kan f\u00e5 lika stora konsekvenser f\u00f6r samh\u00e4llsviktiga funktioner som ett konventionellt v\u00e4pnat angrepp.\nVill du v\u00e4rna om Sverige och v\u00e5r r\u00e4tt att leva som vi sj\u00e4lva v\u00e4ljer i en digitaliserad v\u00e4rld? \u00d6ver internet sker attacker mot datorer och servrar v\u00e4rlden \u00f6ver i en allt st\u00f6rre omfattning. Effekterna av en cyberattack kan f\u00e5 lika stora konsekvenser f\u00f6r samh\u00e4llsviktiga funktioner som ett v\u00e4pnat angrepp. F\u00f6rsvarsmakten som myndighet \u00e4r i st\u00e4ndig utveckling, d\u00e4r v\u00e5r huvudsakliga uppgift \u00e4r att v\u00e4rna om Sveriges okr\u00e4nkbara frihet. Vi \u00e4r beredda att g\u00f6ra det som kr\u00e4vs, \u00e4ven i de sv\u00e5raste av stunder. 2. Cyberf\u00f6rsvarsf\u00f6rbandet s\u00f6ker d\u00e4rf\u00f6r nu en senior incident respone-specialist. Har du ett analytiskt sinnelag och har arbetat flera \u00e5r att hantera incidenter i publika som isolerade milj\u00f6er, d\u00e5 \u00e4r denna tj\u00e4nst f\u00f6r dig.\nHuvudsakliga arbetsuppgifter\nInom Cyberf\u00f6rsvaret vill vi alltid vara i framkant av innovation och genom v\u00e5rt agerande bidra till ett s\u00e4krare Sverige. I denna roll f\u00e5r du m\u00f6jlighet att driva och utveckla cyberf\u00f6rsvarets f\u00f6rm\u00e5ga till att genomf\u00f6ra incidenthantering. I rollen f\u00e5r du \u00e4ven bidra till framtagning av tekniska l\u00f6sningar f\u00f6r att m\u00f6ta cyberf\u00f6rsvarets unika behov, vilket kan inneb\u00e4ra metod-, teknik-, verktygsutveckling. Uppgifterna vi som team st\u00e4lls inf\u00f6r ska kunna l\u00f6sas b\u00e5de i fred som krig, varp\u00e5 fysisk tr\u00e4ning \u00e4r en naturlig del av arbetsuppgiften (arbetsgivaren tillhandah\u00e5ller arbetstid om 3 timmar i veckan f\u00f6r fysisk tr\u00e4ning).\nI rollen som senior incidenthanterare ing\u00e5r det att arbeta med:\nFramtagning av metoder f\u00f6r att incidenthantera i publika som isolerade milj\u00f6er.\nImplementering, administrering och f\u00f6rb\u00e4ttring av metoder f\u00f6r incidenthantering.\nHandledning\/mentorering av juniora medarbetare.\n\nKvalifikationer\nH\u00f6gskoleutbildning inom IT eller motsvarande kunskap som arbetsgivaren finner relevant.\nDokumenterad arbetslivserfarenhet inom relevant arbetsomr\u00e5de om minst 5 \u00e5r.\nB-k\u00f6rkort.\n\nMeriterande\nGenomf\u00f6rd milit\u00e4r grundutbildning\nErfarenhet av arbete med IT-infrastruktur, s\u00e5v\u00e4l publika som isolerade milj\u00f6er.\nErfarenhet utav arbete inom incident response.\nKunskap och erfarenhet utav CTI och detektioner.\nV\u00e4l f\u00f6rtrogen med MITRE ATT&CK\n\nF\u00e4rdigheter inom:\nN\u00e4tverkstrafik\nMalwareanalys (fr\u00e4mst triagering)\n\nPersonliga egenskaper\nVi ser att du som s\u00f6ker har ett h\u00f6gt s\u00e4kerhetsmedvetande. Vi l\u00e4gger stor vikt vid att du som s\u00f6ker har egenskaper s\u00e5 som, kreativitet, l\u00f6sningsorienterad. Du \u00e4r vetgirig och h\u00e5ller dig uppdaterad inom ditt arbetsomr\u00e5de. Du har l\u00e4tt f\u00f6r att samarbeta och v\u00e4rdes\u00e4tter styrkan i att arbeta som ett lag och mot gemensamma m\u00e5l. F\u00f6r att trivas och kunna vara en del av laget beh\u00f6ver du vara prestigel\u00f6s, ha drivet att l\u00f6sa utmaningar p\u00e5 ofullst\u00e4ndig information, och att uppr\u00e4tth\u00e5lla Sveriges s\u00e4kerhet.\nVad erbjuder vi dig\nEtt viktigt och stimulerande arbete d\u00e4r du bidrar till Sveriges s\u00e4kerhet. Inom F\u00f6rsvarsmaktens cyberf\u00f6rsvar erbjuds du kontinuerlig kompetensutveckling s\u00e5 att du kan vidareutvecklas i din roll och f\u00e5 de f\u00f6ruts\u00e4ttningar som kr\u00e4vs f\u00f6r att du ska lyckas med ditt uppdrag. Arbetet innefattar \u00e4ven kontinuerlig grundl\u00e4ggande milit\u00e4rf\u00f6rm\u00e5ga, d\u00e5 v\u00e5r personal innehar kombattantstatus. Den som saknar milit\u00e4r grundutbildning kommer att genomg\u00e5 F\u00f6rsvarsmaktens allm\u00e4nna utbildning (AMU) i syfte att erh\u00e5lla grundf\u00f6rst\u00e5else f\u00f6r milit\u00e4r verksamhet och personlig f\u00e4rdighet. En arbetsplats som pr\u00e4glas av stark gemenskap och har stort fokus p\u00e5 balans mellan arbete och privatliv.\n\u00d6vriga krav: Du b\u00f6r inte ber\u00e4tta att du s\u00f6kt tj\u00e4nst hos 2. Cyberf\u00f6rsvarsf\u00f6rbandet f\u00f6r andra personer \u00e4n dina n\u00e4rmast ber\u00f6rda. Anledningen till att vi ber dig vara \u00e5terh\u00e5llsam med informationen \u00e4r att det finns tj\u00e4nster vid f\u00f6rbandet som omfattas av sekretess. F\u00f6r anst\u00e4llning vid F\u00f6rsvarsmakten kr\u00e4vs svenskt medborgarskap. Med anst\u00e4llning f\u00f6ljer nationell och internationell arbetsskyldighet. Tj\u00e4nsten har kombattantstatus vilket inneb\u00e4r att du skall kunna hantera och bruka vapen. Denna utbildning f\u00e5r du hos oss. En s\u00e4kerhetspr\u00f6vning med registerkontroll kommer att genomf\u00f6ras f\u00f6re anst\u00e4llning. Urvalsprocessen kommer att kompletteras med arbetspsykologiska tester.\nAnst\u00e4llningsform: Tillsvidareanst\u00e4llning, 6 m\u00e5naders provanst\u00e4llning till\u00e4mpas f\u00f6r dig som f\u00f6r n\u00e4rvarande inte \u00e4r anst\u00e4lld inom F\u00f6rsvarsmakten\nPlaceringsort: Link\u00f6ping\nTilltr\u00e4de: Enligt \u00f6verenskommelse\nVill du veta mer om tj\u00e4nsten \u00e4r du v\u00e4lkommen att kontakta oss p\u00e5: 2.cff-rekrytering@mil.se\nV\u00e4lkommen in med din ans\u00f6kan senast 9augusti. Din ans\u00f6kan skall inneh\u00e5lla CV samt ett personligt brev d\u00e4r du beskriver p\u00e5 vilket s\u00e4tt du uppfyller v\u00e5ra efterfr\u00e5gade krav. Ans\u00f6kan skickas till: 2.cff-rekrytering@mil.se, ange referens 32112 p\u00e5 din ans\u00f6kan. OBS! Ans\u00f6kningsanvisningen nedan \u00e4r felaktig anv\u00e4nd mailen\nAns\u00f6kningar till denna befattning kommer endast tas emot via F\u00f6rsvarsmaktens webbplats.\nInformation om det rekryterande f\u00f6rbandet: I H\u00f6gkvarteret finns \u00f6verbef\u00e4lhavaren och generaldirekt\u00f6ren. H\u00f6gkvarteret har ungef\u00e4r 1 000 medarbetare \u2013 b\u00e5de yrkesofficerare och civila experter. H\u00f6gkvarteret utg\u00f6rs fr\u00e5n 2023-01-01 av f\u00f6rsvarsstaben, operationsledningen, milit\u00e4ra underr\u00e4ttelse- och s\u00e4kerhetstj\u00e4nsten, samt H\u00f6gkvarterets stabsavdelning och frist\u00e5ende enheter f\u00f6r tillsyn. En anst\u00e4llning hos oss inneb\u00e4r placering i s\u00e4kerhetsklass. Vanligtvis kr\u00e4vs svenskt medborgarskap. S\u00e4kerhetspr\u00f6vning med registerkontroll kommer att genomf\u00f6ras f\u00f6re anst\u00e4llning enligt 3 kap i s\u00e4kerhetsskyddslagen. Med anst\u00e4llning f\u00f6ljer en skyldighet att krigsplaceras. I anst\u00e4llningen ing\u00e5r \u00e4ven en skyldighet att tj\u00e4nstg\u00f6ra utomlands. Inneb\u00f6rden av detta varierar beroende p\u00e5 typ av befattning. Till ans\u00f6kan om anst\u00e4llning ska CV och personligt brev bifogas. Om du g\u00e5r vidare i anst\u00e4llningsprocessen ska alltid vidimerade kopior av betyg och intyg uppvisas. Samtal fr\u00e5n externa rekryteringsf\u00f6retag och s\u00e4ljare undanbedes.","price":null,"currency":"SEK","status":"active","noindex":true,"location":{"address":null,"full_address":null,"city":"Link\u00f6ping","country":"SE","latitude":58.405681374135,"longitude":15.513919462462},"metadata":{"region":"\u00d6sterg\u00f6tlands l\u00e4n","duration":"Tills vidare","employer":"F\u00d6RSVARSMAKTEN","postcode":"58663","positions":1,"profession":"Dataoperat\u00f6r","salary_type":"Fast m\u00e5nads- vecko- eller timl\u00f6n","employer_url":"https:\/\/www.forsvarsmakten.se\/","scope_of_work":"100\u2013100 %","working_hours":"Heltid","driving_license":true,"employment_type":"Vanlig anst\u00e4llning","occupation_field":"Data\/IT","employer_workplace":"F\u00f6rsvarsmakten","translation_status":"done","experience_required":true},"user_id":null,"is_sponsored":false,"views_count":0,"ai_views_count":1,"ai_vendor_counts":{"anthropic":1},"visibility":"public","submission_source":null,"submission_ai_name":null,"has_owner_email":true,"can_contact_owner":true,"phone":null,"owner_email":"2.cff-rekrytering@mil.se","images":[],"published_at":"2026-08-20T08:32:22+00:00","expires_at":"2026-09-27T23:59:59+00:00","created_at":"2026-08-21T03:18:34+00:00","updated_at":"2026-08-21T04:01:39+00:00"}}