{"data":{"id":144881,"slug":"it-sakerhetsanalytiker-uppdrag-att-skydda-svenska-intressen","type":"job","title":"IT Security Analyst - Mission to Protect Swedish Interests","description":"1 position(s).\n\nDo you want to contribute to society and help protect Sweden's independence in the world? We are looking for someone with knowledge and experience in IT technology who wants to work with IT security analysis. At FRA, every task is part of something larger. If you are the person we're looking for, we can offer you varied work in a knowledge-intensive environment where you can make a difference every day.\n\nYour Mission\nAs an IT Security Analyst, you will be part of a unit within the Cyber Operations Department. The department aims to strengthen protection against sophisticated IT attacks on Sweden's most critical operations. In this role, you will be a central part of our security efforts by conducting in-depth IT security analyses, with a particular focus on performing IT forensic work.\n\nYou will also be responsible for developing detections to identify malicious files and analyzing logs for signs of intrusion in infected systems. Furthermore, you will actively contribute to our continued analysis and methodology development to continuously improve and adapt our capabilities to strengthen protection for the most critical operations. The role may also involve both domestic and international travel, and the need for on-call duty and standby shifts will likely increase.\n\nAs a security analyst, your main responsibilities will include:\n\nInvestigating and securing evidence in complex attacks against particularly critical operations\nPerforming IT forensic analyses of various data sources to establish the situation picture\nProviding recommendations for measures to strengthen protection and increase capability\nDeveloping detections based on analysis and insights\nDocumentation and reporting of results\n\nThe work requires continuous development of competence, methods and tools, as well as ongoing collaboration with other areas within FRA and with clients and partners.\n\nYou Can\nWe are looking for someone who has:\n\nKnowledge acquired through post-secondary education or other studies\/courses in IT technology\nAt least 2 years of professional experience in a subject-relevant technical role that the employer deems equivalent\nKnowledge and experience with Windows\nVery good ability to express yourself in Swedish and English, both verbally and in writing\n\nWe consider it meritorious if you have experience in some of the following areas:\n\nAdvanced training and\/or specialist knowledge in IT\/cybersecurity or similar fields\nRelevant certifications in the field\nMore than 2 years of professional experience in a specialist role with focus on, for example, IT forensics, IT incidents, IT security analysis, intrusion detection, programming. Alternatively, another area that the employer deems equivalent\nKnowledge and experience with Linux\nExperience analyzing large datasets in tools such as Elastic and Spark\nProgramming skills in, for example, scripting in PowerShell, Python, etc.\nKnowledge of CTFs (Capture the Flag) or other technical challenges, for example involving malicious code, IT forensics or network traffic\n\nYou Are\nWe are looking for someone with the following qualities:\n\nGoal- and results-oriented \u2013 Works toward goals and focuses on results. Driven by goal and results thinking in prioritization, planning and action. Changes direction when goals change.\nService-oriented \u2013 Is calm, attentive and accommodating in your interactions. Has interest, willingness and ability to help others and strives to deliver solutions.\nDevelopment-oriented \u2013 Easily absorbs and sees opportunities in new ideas, methods and working practices. Drives and implements change.\nProblem-solving analytical ability \u2013 Works well with complex issues. Analyzes and breaks down problems into their components and solves complicated problems.\n\nAbout FRA\nFRA has the world as its arena where every task is part of something larger. In one way or another, as an employee you get to contribute to protecting Sweden's integrity and independence in the world. You make a real difference, every day.\n\nOur mission as an intelligence service is to protect Sweden against the most serious threats that can be directed against a society \u2013 military attacks, terrorism and cyberattacks. We protect what is most important to us \u2013 our security, our democracy and our way of life. We are experts in the cyber field and signals intelligence as well as an early warning system for military threats.\n\nSince 2024, FRA has led the National Cybersecurity Center, NCSC, whose mission is to develop and strengthen Sweden's ability to prevent, detect and manage cyber threats.\n\nAs a new employee at FRA, you will receive comprehensive introductory training and continuous skills development, which gives you the opportunity to develop your skills and become even better at what you are passionate about. Our organization is multifaceted and consists of different competencies and personalities, where each individual has unique characteristics and conditions. We strive to create an environment where everyone feels welcome and safe. In addition to a stimulating work environment, we also offer an attractive benefits package, which you can read more about at www.fra.se. For more information about the National Cybersecurity Center, visit www.ncsc.se\n\nFor your security. For our democracy. Every day. Year-round.\n\nMore Information\nThe workplace is located near Drottningholm, approximately 10 minutes from Brommaplan. Swedish citizenship is a requirement as employment at FRA involves placement in a security classification. Before employment, you will be security screened in accordance with the provisions of the Security Protection Act. Employment includes an obligation to be placed on a war readiness roster. We apply a six-month probationary period. For more information, please contact the recruiting manager at rekrytering@fra.se. Trade union representatives can be reached at 010-557 46 00.\n\nWe accept applications via www.fra.se no later than 2026-09-06.\n\nReference number 2025FRA330-9.\n\nAs we have already made decisions regarding the recruitment channels we wish to use for this recruitment, we decline to be contacted regarding additional offers of advertising and recruitment assistance.\n\nSearch terms:\nIT security*, cybersecurity, threat hunting*, Threat hunter, incident, IT incident, IT forensics, IT forensicist, network analysis, IT security technician, IT security specialist, file analysis, log analysis, cyber*, security analyst\n\nEmployment type: Permanent position.\nDuration: Permanent.\nWorking hours: Daytime.","language":"sv","is_translated":true,"title_original":"IT-s\u00e4kerhetsanalytiker - uppdrag att skydda svenska intressen ","description_original":"1 plats(er). \r\n\r\n\nVill du g\u00f6ra samh\u00e4llsnytta och bidra till Sveriges oberoende i v\u00e4rlden? Vi s\u00f6ker dig som har kunskap och erfarenhet av IT teknik och som vill arbeta med IT-s\u00e4kerhetsanalyser. P\u00e5 FRA \u00e4r varje arbetsuppgift en del av n\u00e5got st\u00f6rre. \u00c4r du den vi s\u00f6ker kan vi erbjuda ett varierande arbete i en kunskapsintensiv milj\u00f6 d\u00e4r du f\u00e5r vara med och g\u00f6ra skillnad varje dag.\nDitt uppdrag\nSom IT-s\u00e4kerhetsanalytiker h\u00f6r du till en enhet inom avdelningen f\u00f6r cyberverksamhet. Avdelningen ska bidra till att st\u00e4rka skyddet mot kvalificerade IT-angrepp hos Sveriges mest skyddsv\u00e4rda verksamheter. I rollen kommer du att vara en central del i v\u00e5rt s\u00e4kerhetsarbete genom att utf\u00f6ra djupg\u00e5ende IT-s\u00e4kerhetsanalyser, med ett s\u00e4rskilt fokus p\u00e5 att utf\u00f6ra IT-forensiskt arbete.\nDu kommer \u00e4ven att ansvara f\u00f6r att utveckla detektioner f\u00f6r att identifiera skadliga filer och analysera loggar efter tecken p\u00e5 intr\u00e5ng i infekterade system. Vidare bidrar du aktivt till v\u00e5r fortsatta analys- och metodutveckling f\u00f6r att st\u00e4ndigt h\u00f6ja och anpassa f\u00f6rm\u00e5gan f\u00f6r att st\u00e4rka f\u00f6r de mest skyddsv\u00e4rda verksamheterna. Rollen kan vidare inneb\u00e4ra b\u00e5de inrikes och utrikes resor samt behovet av beredskap och jour kommer sannolikt att \u00f6ka.\nI rollen som s\u00e4kerhetsanalytiker inneb\u00e4r dina huvudsakliga arbetsuppgifter att:\nUtreda och s\u00e4kra bevis vid komplexa angrepp mot s\u00e4rskilt skyddsv\u00e4rda verksamheter\nUtf\u00f6ra IT-forensiska analyser av olika datak\u00e4llor f\u00f6r att fastst\u00e4lla l\u00e4gesbilden\nGe rekommendationer p\u00e5 \u00e5tg\u00e4rder f\u00f6r att st\u00e4rka skydd och h\u00f6ja f\u00f6rm\u00e5ga\nUtveckla detektioner baserat p\u00e5 analys och insikter\nDokumentation och rapportering av resultaten\n\nArbetet kr\u00e4ver kontinuerlig utveckling av kompetens, metoder och verktyg, samt fortl\u00f6pande samverkan med andra omr\u00e5den inom FRA samt med uppdragsgivare och samarbetspartners.\nDu kan\nVi s\u00f6ker dig som har:\nKunskap f\u00f6rv\u00e4rvad genom eftergymnasial utbildning eller \u00f6vriga studier\/kurser inom IT-teknik\nMinst 2 \u00e5rs arbetslivserfarenhet inom \u00e4mnesrelevant teknisk roll som arbetsgivaren bed\u00f6mer likv\u00e4rdig\nKunskap och erfarenhet av Windows\nMycket god f\u00f6rm\u00e5ga att uttrycka dig i svenska och engelska, i b\u00e5de tal och skrift\n\nVi ser det som meriterande om du har erfarenhet inom n\u00e5gra av nedan omr\u00e5den:\nVidareutbildning och\/eller specialistkunskap inom IT\/cybers\u00e4kerhet eller liknande omr\u00e5den\nOmr\u00e5desrelevanta certifieringar\nMer \u00e4n 2 \u00e5rs arbetslivserfarenhet i en specialistroll med fokus p\u00e5 exempelvis IT-forensik, IT-incidenter, IT-s\u00e4kerhetsanalyser, intr\u00e5ngsdetektion, programmering. Alternativt annat omr\u00e5de som arbetsgivaren bed\u00f6mer likv\u00e4rdig\nKunskap och erfarenhet av Linux\nErfarenhet av att analysera stora datam\u00e4ngder i verktyg som exempelvis Elastic och Spark\nProgrammeringskunskaper inom exempelvis scripting i PowerShell, Python etc\nKunskap inom CTF:er (Capture the Flag) eller andra tekniska utmaningar, om exempelvis skadlig kod, IT-forensik eller n\u00e4tverkstrafik\n\nDu \u00e4r\nVi s\u00f6ker dig med f\u00f6ljande egenskaper:\nM\u00e5l- och resultatorienterad \u2013 Arbetar mot m\u00e5l och fokuserar p\u00e5 resultat. Styrs av m\u00e5l-och resultatt\u00e4nkande i prioriteringar, planering och agerande. F\u00f6r\u00e4ndrar sin inriktning n\u00e4r m\u00e5len \u00e4ndrar sig.\nServiceinriktad \u2013 \u00c4r lugn, uppm\u00e4rksam och tillm\u00f6tesg\u00e5ende i sitt bem\u00f6tande. Har intresse, vilja och f\u00f6rm\u00e5ga att hj\u00e4lpa andra och anstr\u00e4nger sig f\u00f6r att leverera l\u00f6sningar.\nUtvecklingsorienterad \u2013 Har l\u00e4tt f\u00f6r att ta till sig och se m\u00f6jligheter med nya id\u00e9er, metoder och arbetss\u00e4tt. Driver och implementerar f\u00f6r\u00e4ndring.\nProbleml\u00f6sande analysf\u00f6rm\u00e5ga \u2013 Arbetar bra med komplexa fr\u00e5gor. Analyserar och bryter ner problem i sina best\u00e5ndsdelar och l\u00f6ser komplicerade problem.\n\nOm FRA\nFRA har omv\u00e4rlden som sin arena d\u00e4r varje arbetsuppgift \u00e4r en del av n\u00e5got st\u00f6rre. P\u00e5 ett eller annat s\u00e4tt f\u00e5r du som medarbetare vara med och bidra till att skydda Sveriges integritet och oberoende i v\u00e4rlden. Du \u00e4r med och g\u00f6r skillnad p\u00e5 riktigt, varje dag.\nV\u00e5r uppgift som underr\u00e4ttelsetj\u00e4nst \u00e4r att skydda Sverige mot de allvarligaste hot som kan riktas mot ett samh\u00e4lle \u2013 milit\u00e4ra angrepp, terrorism och cyberattacker. Vi skyddar det viktigaste vi har \u2013 v\u00e5r trygghet, v\u00e5r demokrati och v\u00e5rt s\u00e4tt att leva. Vi \u00e4r experter p\u00e5 cyberomr\u00e5det och signalspaning samt en larmklocka f\u00f6r milit\u00e4ra hot.\nFRA leder sedan 2024 Nationellt cybers\u00e4kerhetscenter, NCSC vars uppdrag \u00e4r att utveckla och st\u00e4rka Sveriges f\u00f6rm\u00e5ga att f\u00f6rebygga, uppt\u00e4cka och hantera cyberhot.\nSom nyanst\u00e4lld p\u00e5 FRA f\u00e5r du en omfattande introduktionsutbildning och kontinuerlig kompetensutveckling, vilket ger dig m\u00f6jlighet att utveckla dina f\u00e4rdigheter och bli \u00e4nnu b\u00e4ttre p\u00e5 det du brinner f\u00f6r. V\u00e5r organisation \u00e4r m\u00e5ngfacetterad och best\u00e5r av olika kompetenser och personligheter, d\u00e4r varje individ har unika egenskaper och f\u00f6ruts\u00e4ttningar. Vi str\u00e4var efter att skapa en milj\u00f6 d\u00e4r alla k\u00e4nner sig v\u00e4lkomna och trygga. Ut\u00f6ver en stimulerande arbetsmilj\u00f6 erbjuder vi ocks\u00e5 ett attraktivt f\u00f6rm\u00e5nspaket, som du kan l\u00e4sa mer om p\u00e5 www.fra.se  (http:\/\/www.fra.se\/). F\u00f6r mer information om Nationellt cybers\u00e4kerhetscenter bes\u00f6k www.ncsc.se (http:\/\/www.ncsc.se\/)\r\n\r\nF\u00f6r din trygghet. F\u00f6r v\u00e5r demokrati. Varje dag. \u00c5ret om.\nMer information\nArbetsplatsen \u00e4r bel\u00e4gen i n\u00e4rheten av Drottningholm, ca 10 min fr\u00e5n Brommaplan. Svenskt medborgarskap \u00e4r ett krav d\u00e5 anst\u00e4llning vid FRA inneb\u00e4r placering i s\u00e4kerhetsklass. Innan en anst\u00e4llning kommer du att s\u00e4kerhetspr\u00f6vas i enlighet med s\u00e4kerhetsskyddslagens best\u00e4mmelser. Med anst\u00e4llning f\u00f6ljer en skyldighet att krigsplaceras. Vi till\u00e4mpar sex m\u00e5naders provanst\u00e4llning. F\u00f6r mer information \u00e4r du v\u00e4lkommen att kontakta rekryterande chef p\u00e5 rekrytering@fra.se. Fackliga f\u00f6retr\u00e4dare n\u00e5s p\u00e5 010-557 46 00.\nVi tar emot ans\u00f6kningar via www.fra.se senast 2026-09-06. \r\nReferensnummer 2025FRA330-9. \nD\u00e5 vi inf\u00f6r denna rekrytering redan tagit st\u00e4llning till de rekryteringskanaler vi \u00f6nskar anv\u00e4nda undanber vi oss att bli kontaktade f\u00f6r ytterligare erbjudanden om annonserings- och rekryteringshj\u00e4lp.\nS\u00f6kord:\n\u00a0IT-s\u00e4kerhet*, cybers\u00e4kerhet, threat hunting*, Threat hunter, incident, IT-incident, IT-forensik,IT-forensiker, n\u00e4tverksanalys, it-s\u00e4kerhetstekniker, it-s\u00e4kerhetsspecialist, filanalys, logganalys, cyber*, s\u00e4kerhetsanalytiker\nAnst\u00e4llningsform: Tillsvidareanst\u00e4llning.\r\nVaraktighet: Tillsvidare.\r\nArbetstid: Dagtid.","price":null,"currency":"SEK","status":"active","noindex":false,"location":{"address":"Box 301","full_address":null,"city":"Bromma","country":"SE","latitude":59.3540027,"longitude":17.9550408},"metadata":{"region":"Stockholms l\u00e4n","duration":"Tills vidare","employer":"F\u00d6RSVARETS RADIOANSTALT","postcode":"16126","positions":1,"profession":"IT-s\u00e4kerhetsanalytiker","salary_type":"Fast m\u00e5nads- vecko- eller timl\u00f6n","scope_of_work":"100\u2013100 %","working_hours":"Heltid","contact_person":"Rekryterande   chef","employment_type":"Vanlig anst\u00e4llning","occupation_field":"Data\/IT","employer_workplace":"FRA, Cyber","experience_required":true},"user_id":null,"is_sponsored":false,"views_count":0,"ai_views_count":1,"ai_vendor_counts":{"anthropic":1},"visibility":"public","submission_source":null,"submission_ai_name":null,"has_owner_email":true,"can_contact_owner":true,"phone":"+46105574600","owner_email":"rekrytering@fra.se","images":[],"published_at":"2026-08-10T01:35:48+00:00","expires_at":"2026-09-06T23:59:59+00:00","created_at":"2026-08-15T02:58:37+00:00","updated_at":"2026-08-19T03:01:47+00:00"}}