Essential requirements:

• Minimum 5 years of experience in cybersecurity, with hands-on expertise in Cyber Threat Management.
• Proven experience operating and managing a SIEM platform (e.g., onboarding, automation, incident response).
• Broad technical knowledge across infrastructure, networks, operating systems, and cloud.
• Experience with incident response, threat detection controls, and risk-based security approaches.
• Familiarity with Agile methodologies and working with development teams.
• Knowledge of Zero Trust principles is a plus.

Key Competences:
• SIEM Tools (For example CrowdStrike , Cribl Edge & Stream, Splunk Core, Splunk Enterprise Security)
• Endpoint Tools (For example CrowdStrike, Palo Alto Cortex XDR, Cylance Protect)
• Cloud Security (Azure Sentinel)
• Security Architecture & Design for SIEM environments

Mandatory Skills (preferably 3 skills):
• Security Tools: Crowdstrike, Cribl, Splunk, Cylance, Palo Alto XDR etc.
• Platforms: Windows, Linux
• Cloud: Azure


Desired skills (preferably 2 skills):
Programming/Scripting: SPL, XQL, PowerShell & JSON

Certifications (Examples);
•CrowdStrike Certified Falcon Administrator (CCFA)
•CrowdStrike Certified Falcon Responder (CCFR)
•CrowdStrike Certified Falcon Hunter (CCFH)
•CrowdStrike Certified SIEM Engineer (CCSE)
•CrowdStrike Certified Identity Specialist (CCIS)
• Cribl Certified Admin – Stream
• Cribl Certified Admin – Edge
• Microsoft AZ-900, MS-900

Please explain how you meet all the requirements when applying.

Utilization: 100%
Location: Lund
Period:  15-10-2025-31-01-2026
Last day to apply: 06-10-2025
We present regularly. This means that we sometimes remove the assignements from our website before the final application deadline. If you are interested in an assignement, we recommend that you submit your application as soon as possible.