{"data":{"id":179873,"slug":"it-sakerhetstekniker-till-fras-soc","type":"job","title":"IT Security Technician to FRA's SOC","description":"1 position(s). \r\n\r\n\nDo you want to make a positive impact on society and contribute to Sweden's independence in the world? FRA is seeking quality-conscious employees for our internal security function. At FRA, every task is part of something larger. If you're the person we're looking for, we can offer you varied work in a knowledge-intensive environment where you get to make a difference every day.\nYour Assignment\nAs an IT Security Technician, you will be part of FRA's security office. The security office's task is to ensure FRA's security protection for the agency's various operations based on their specific conditions.\nIn your role as IT Security Technician, you will ensure FRA's own security protection for the agency's various operations based on their specific conditions. We are seeking several people, and you will work either with on-premises solutions or cloud services.\nYou will, among other things:\nHandle log analysis within the Security Operations Center (SOC)\nProcess incident cases\nConduct various types of investigations in the IT security field\nHandle inquiries and participate as an expert in internal IT security work\n\nYou will be part of a team where you work both independently and together with colleagues who have similar tasks in the security office.\nBeyond collaboration within the security office, the position involves many contact points both internally within the agency and externally, primarily with other government agencies. To thrive in the role, we see that you are security-conscious and driven by staying current with technological developments.\nYou Can\nWe are looking for someone who has:\nUpper secondary education (gymnasium)\nBasic technical knowledge of operating large IT environments, IT and network technology, and IT security work, which can be acquired through studies or relevant work experience\nGood understanding of identity and access management in Microsoft environments, for example Active Directory or Microsoft Entra ID\nGood knowledge of attack methodologies and established frameworks, such as MITRE ATT&CK\nKnowledge and experience in, for example, PowerShell, Python, Bash, JavaScript\nGood skills in Swedish and English, both spoken and written\n\n \nWe consider the following as merits:\nPost-secondary education in systems science, Cyber\/IT security, or similar\nExperience of independently leading and driving incident investigations. From detection and escalation to remediation, reporting, and follow-up.\nExperience with log analysis and alerting in SIEM or equivalent analysis tools, such as Microsoft Sentinel, Splunk, or QRadar.\nDocumented experience with operational cybersecurity work, preferably from SOC, CERT, CSIRT, or similar environment.\nExperience working in or with security-sensitive operations\nIn-depth knowledge of on-premises Active Directory, such as hardening, administrative models (tiering), GPO security, Kerberos, etc. \u2013 or \u2013 Knowledge and experience of Microsoft Azure and Microsoft 365 from a security perspective (Entra ID, Defender XDR, Sentinel), preferably also other cloud platforms such as AWS or GCP\nExperience with security audits and\/or penetration testing as well as IT forensics work\nExperience with development in modern IT environments\nExperience with managing large IT environments\n\nIt is also a merit if you have previously completed any of FRA's CTF challenges. If you haven't done so before, you can find them at challenge.fra.se.\nYou Are\nWe are looking for someone with the following characteristics:\nCollaboration Skills \u2013 Works well with other people. Relates to them in a responsive and flexible manner. Listens, communicates, and resolves conflicts constructively.\nInitiative \u2013 Takes initiative, starts activities, and achieves results.\nRule-Conscious \u2013 Places great importance on and acts in accordance with decisions made, rules, and guidelines. Addresses concerns and criticism constructively.\nStructured \u2013 Plans, organizes, and prioritizes work efficiently. Sets and keeps to deadlines.\nAbout FRA\nFRA has the world around us as our arena, where every task is part of something larger. In one way or another, you as an employee get to contribute to protecting Sweden's integrity and independence in the world. You are making a real difference, every day.\nOur mission as an intelligence service is to protect Sweden against the most serious threats facing society \u2013 military attacks, terrorism, and cyberattacks. We protect what is most important to us \u2013 our security, our democracy, and our way of life. We are experts in the cyber field and signals intelligence as well as an early warning system for military threats.\nSince 2024, FRA has led the National Cyber Security Center, NCSC, whose mission is to develop and strengthen Sweden's ability to prevent, detect, and handle cyber threats.\nAs a new employee at FRA, you will receive comprehensive introductory training and continuous professional development, which gives you the opportunity to develop your skills and become even better at what you are passionate about. Our organization is multifaceted and consists of different competencies and personalities, where each individual has unique qualities and circumstances. We strive to create an environment where everyone feels welcome and secure. In addition to a stimulating work environment, we also offer an attractive benefits package, which you can read more about at www.fra.se. For more information about the National Cyber Security Center, visit www.ncsc.se\r\n\r\nFor your security. For our democracy. Every day. Year-round.\nMore Information\nThe workplace is located near Drottningholm, approximately 10 minutes from Brommaplan. Swedish citizenship is a requirement as employment at FRA involves security clearance. Before employment, you will be security vetted in accordance with the Security Protection Act. Employment includes an obligation to be placed on wartime mobilization reserve. We apply a six-month probationary period. In this recruitment process, work tests\/assessments will be used. For more information, you are welcome to contact the recruiting manager at rekrytering@fra.se. Trade union representatives can be reached at 010-557 46 00.\nWe accept applications via www.fra.se no later than 2026-09-27. \r\nReference number 2026FRA1185-2. \nSince we have already decided on the recruitment channels we wish to use for this recruitment, we do not wish to be contacted for additional offers of advertising and recruitment assistance.\nKeywords: IT security, SOC, cloud services, AWS, azure, 365\nEmployment Type: Permanent employment.\r\nDuration: Permanent.\r\nWork Hours: Daytime.","language":"sv","is_translated":true,"title_original":"IT-s\u00e4kerhetstekniker till FRAs SOC","description_original":"1 plats(er). \r\n\r\n\nVill du g\u00f6ra samh\u00e4llsnytta och bidra till Sveriges oberoende i v\u00e4rlden? FRA s\u00f6ker kvalitetsmedvetna medarbetare till v\u00e5r interna s\u00e4kerhetsfunktion. P\u00e5 FRA \u00e4r varje arbetsuppgift en del av n\u00e5got st\u00f6rre. \u00c4r du den vi s\u00f6ker kan vi erbjuda ett varierande arbete i en kunskapsintensiv milj\u00f6 d\u00e4r du f\u00e5r vara med och g\u00f6ra skillnad varje dag.\nDitt uppdrag\nSom IT- s\u00e4kerhetstekniker kommer du tillh\u00f6ra FRA:s s\u00e4kerhetskontor. S\u00e4kerhetskontorets uppgift \u00e4r att s\u00e4kerst\u00e4lla FRA:s s\u00e4kerhetsskydd f\u00f6r myndighetens olika verksamheter utifr\u00e5n dess specifika f\u00f6ruts\u00e4ttningar.\nI rollen som IT- s\u00e4kerhetstekniker kommer att s\u00e4kerst\u00e4lla FRA:s egna s\u00e4kerhetsskydd f\u00f6r myndighetens olika verksamheter utifr\u00e5n dess specifika f\u00f6ruts\u00e4ttningar. Vi s\u00f6ker h\u00e4r flera personer och du kommer antingen att arbeta mot on-prem l\u00f6sningar eller mot molntj\u00e4nster.\nDu kommer bland annat:\nHantera analys av loggar inom Security Operations Center (SOC)\nHandl\u00e4ggning av incident\u00e4renden\nUtf\u00f6ra olika typer av utredningar inom it-s\u00e4kerhetsomr\u00e5det\nHantera fr\u00e5gor och delta som expert i det interna IT-s\u00e4kerhetsarbetet\n\nDu kommer vara en del av ett team d\u00e4r du i det dagliga arbetet arbetar b\u00e5de sj\u00e4lvst\u00e4ndigt och tillsammans med kollegor som har liknande uppgifter p\u00e5 s\u00e4kerhetskontoret.\nUt\u00f6ver samverkan inom s\u00e4kerhetskontoret inneb\u00e4r tj\u00e4nsten m\u00e5nga kontaktytor s\u00e5v\u00e4l internt inom myndigheten som externt fr\u00e4mst andra myndigheter. F\u00f6r att trivas i rollen ser vi att du \u00e4r s\u00e4kerhetsmedveten och drivs av att f\u00f6lja med i teknikutvecklingen.\nDu kan\nVi s\u00f6ker dig som har:\nGymnasial utbildning\nTeknisk baskunskap inom drift av st\u00f6rre IT-milj\u00f6er, IT- och n\u00e4tverksteknik samt IT-s\u00e4kerhetsarbete, vilken kan vara f\u00f6rv\u00e4rvad genom studier eller genom relevant arbetslivserfarenhet\nGod f\u00f6rst\u00e5else f\u00f6r identitets- och \u00e5tkomsthantering i Microsoftmilj\u00f6er, exempelvis Active Directory eller Microsoft Entra ID\nGod k\u00e4nnedom om attackmetodik och etablerade ramverk, t.ex. MITRE ATT&CK\nKunskap och erfarenhet i t.ex. Powershell, Python, Bash, JavaScript\nGoda kunskaper i svenska och engelska i s\u00e5v\u00e4l tal som skrift\n\n\u00a0\nVi ser det som meriterande om du har:\nEftergymnasial utbildning inom systemvetenskap, Cyber\/it-s\u00e4kerhet eller liknande\nErfarenhet av att sj\u00e4lvst\u00e4ndigt leda och driva incidentutredningar. Fr\u00e5n detektion och eskalering till \u00e5tg\u00e4rd, rapportering och uppf\u00f6ljning.\nErfarenhet av logganalys och alarmering i SIEM eller motsvarande analysverktyg, t.ex. Microsoft Sentinel, Splunk eller QRadar.\nDokumenterad erfarenhet av operativt cybers\u00e4kerhetsarbete, g\u00e4rna fr\u00e5n SOC, CERT, CSIRT eller motsvarande milj\u00f6.\nErfarenhet av arbete i eller med s\u00e4kerhetsk\u00e4nslig verksamhet\nDjupg\u00e5ende kunskap om on-prem Active Directory, t.ex. h\u00e4rdning, administrativa modeller (tiering), GPO-s\u00e4kerhet, Kerberos etc - eller - Kunskap och erfarenhet av Microsoft Azure och Microsoft 365 ur ett s\u00e4kerhetsperspektiv (Entra ID, Defender XDR, Sentinel), g\u00e4rna \u00e4ven andra molnplattformar som AWS eller GCP\nErfarenhet av s\u00e4kerhetsgranskningar och\/eller penetrationstester samt IT-forensiskt arbete\nErfarenhet av utveckling i moderna IT-milj\u00f6er\nErfarenhet av drift av stora IT-milj\u00f6er\n\nDet \u00e4r \u00e4ven meriterande om du tidigare har utf\u00f6rt n\u00e5gon av FRA:s CTF utmaningar. Har du inte gjort n\u00e5gon sedan innan kan du hitta dem p\u00e5 challenge.fra.se.\nDu \u00e4r\nVi s\u00f6ker dig med f\u00f6ljande egenskaper:\nSamarbetsf\u00f6rm\u00e5ga \u2013 Arbetar bra med andra m\u00e4nniskor. Relaterar sig till dem p\u00e5 ett lyh\u00f6rt och smidigt s\u00e4tt. Lyssnar, kommunicerar och l\u00f6ser konflikter p\u00e5 ett konstruktivt s\u00e4tt.\nInitiativtagande \u2013 Tar initiativ, s\u00e4tter ig\u00e5ng aktiviteter och uppn\u00e5r resultat.\nRegelmedveten \u2013 F\u00e4ster stort vikt vid och handlar i enlighet med fattade beslut, regler och riktlinjer. Tar upp synpunkter och kritik p\u00e5 ett konstruktivt s\u00e4tt.\nStrukturerad \u2013 Planerar, organiserar och prioriterar arbetet p\u00e5 ett effektivt s\u00e4tt. S\u00e4tter upp och h\u00e5ller tidsramar.\nOm FRA\nFRA har omv\u00e4rlden som sin arena d\u00e4r varje arbetsuppgift \u00e4r en del av n\u00e5got st\u00f6rre. P\u00e5 ett eller annat s\u00e4tt f\u00e5r du som medarbetare vara med och bidra till att skydda Sveriges integritet och oberoende i v\u00e4rlden. Du \u00e4r med och g\u00f6r skillnad p\u00e5 riktigt, varje dag.\nV\u00e5r uppgift som underr\u00e4ttelsetj\u00e4nst \u00e4r att skydda Sverige mot de allvarligaste hot som kan riktas mot ett samh\u00e4lle \u2013 milit\u00e4ra angrepp, terrorism och cyberattacker. Vi skyddar det viktigaste vi har \u2013 v\u00e5r trygghet, v\u00e5r demokrati och v\u00e5rt s\u00e4tt att leva. Vi \u00e4r experter p\u00e5 cyberomr\u00e5det och signalspaning samt en larmklocka f\u00f6r milit\u00e4ra hot.\nFRA leder sedan 2024 Nationellt cybers\u00e4kerhetscenter, NCSC vars uppdrag \u00e4r att utveckla och st\u00e4rka Sveriges f\u00f6rm\u00e5ga att f\u00f6rebygga, uppt\u00e4cka och hantera cyberhot.\nSom nyanst\u00e4lld p\u00e5 FRA f\u00e5r du en omfattande introduktionsutbildning och kontinuerlig kompetensutveckling, vilket ger dig m\u00f6jlighet att utveckla dina f\u00e4rdigheter och bli \u00e4nnu b\u00e4ttre p\u00e5 det du brinner f\u00f6r. V\u00e5r organisation \u00e4r m\u00e5ngfacetterad och best\u00e5r av olika kompetenser och personligheter, d\u00e4r varje individ har unika egenskaper och f\u00f6ruts\u00e4ttningar. Vi str\u00e4var efter att skapa en milj\u00f6 d\u00e4r alla k\u00e4nner sig v\u00e4lkomna och trygga. Ut\u00f6ver en stimulerande arbetsmilj\u00f6 erbjuder vi ocks\u00e5 ett attraktivt f\u00f6rm\u00e5nspaket, som du kan l\u00e4sa mer om p\u00e5 www.fra.se  (http:\/\/www.fra.se\/). F\u00f6r mer information om Nationellt cybers\u00e4kerhetscenter bes\u00f6k www.ncsc.se (http:\/\/www.ncsc.se\/)\r\n\r\nF\u00f6r din trygghet. F\u00f6r v\u00e5r demokrati. Varje dag. \u00c5ret om.\nMer information\nArbetsplatsen \u00e4r bel\u00e4gen i n\u00e4rheten av Drottningholm, ca 10 min fr\u00e5n Brommaplan. Svenskt medborgarskap \u00e4r ett krav d\u00e5 anst\u00e4llning vid FRA inneb\u00e4r placering i s\u00e4kerhetsklass. Innan en anst\u00e4llning kommer du att s\u00e4kerhetspr\u00f6vas i enlighet med s\u00e4kerhetsskyddslagens best\u00e4mmelser. Med anst\u00e4llning f\u00f6ljer en skyldighet att krigsplaceras. Vi till\u00e4mpar sex m\u00e5naders provanst\u00e4llning. I denna rekryteringsprocess kommer arbetsprov\/tester att till\u00e4mpas. F\u00f6r mer information \u00e4r du v\u00e4lkommen att kontakta rekryterande chef p\u00e5 rekrytering@fra.se. Fackliga f\u00f6retr\u00e4dare n\u00e5s p\u00e5 010-557 46 00.\nVi tar emot ans\u00f6kningar via www.fra.se senast 2026-09-27. \r\nReferensnummer 2026FRA1185-2. \nD\u00e5 vi inf\u00f6r denna rekrytering redan tagit st\u00e4llning till de rekryteringskanaler vi \u00f6nskar anv\u00e4nda undanber vi oss att bli kontaktade f\u00f6r ytterligare erbjudanden om annonserings- och rekryteringshj\u00e4lp.\nS\u00f6kord: IT-s\u00e4kerhet, SOC, molntj\u00e4nst, AWS, azure, 365\nAnst\u00e4llningsform: Tillsvidareanst\u00e4llning.\r\nVaraktighet: Tillsvidare.\r\nArbetstid: Dagtid.","price":null,"currency":"SEK","status":"active","noindex":true,"location":{"address":"Box 301","full_address":null,"city":"Bromma","country":"SE","latitude":59.3540027,"longitude":17.9550408},"metadata":{"region":"Stockholms l\u00e4n","duration":"Tills vidare","employer":"F\u00f6rsvarets Radioanstalt","postcode":"16126","positions":1,"profession":"IT-s\u00e4kerhetstekniker","salary_type":"Fast m\u00e5nads- vecko- eller timl\u00f6n","scope_of_work":"100\u2013100 %","working_hours":"Heltid","contact_person":"Rekryterande   chef","employment_type":"full_time","occupation_field":"Data\/IT","employer_workplace":"FRA, Verksamhetsst\u00f6d","experience_required":true,"employment_type_label":"Vanlig anst\u00e4llning"},"user_id":null,"is_sponsored":false,"views_count":1,"ai_views_count":3,"ai_vendor_counts":{"other":2,"anthropic":1},"visibility":"public","submission_source":null,"submission_ai_name":null,"has_owner_email":true,"can_contact_owner":true,"phone":"+46105574600","owner_email":"rekrytering@fra.se","images":[],"published_at":"2026-08-31T01:35:28+00:00","expires_at":"2026-09-27T23:59:59+00:00","created_at":"2026-09-01T03:11:50+00:00","updated_at":"2026-09-03T06:44:36+00:00"}}