10% off your first planNew here? Use code NORDIC10 at checkout.Use code NORDIC10
Claim 10% off
Nordic Roles logoNordic Roles
← Back to jobs

Cybersecurity Specialist

Cyber Instincts AB · Västerås

posted 9d ago, last live 2d ago

Key factors at a glance

Seniority
Mid
Experience
—
Work mode
On-site
Salary
Not stated
Required working language
English

Must-haves

  • Cybersecurity foundation in product development
  • Software development or system architecture background
  • Hands-on support for development teams
  • Risk assessment of products
  • Security code review
  • Secure development lifecycle knowledge
  • Threat modeling
  • Vulnerability management

Nice-to-haves

  • Embedded systems and firmware experience
  • C/C++ knowledge
  • VHDL/Assembler
  • Real-time operating systems (RTOS)
  • C#/Java
  • Windows environments expertise
  • CRA compliance experience
  • IEC 62443 knowledge
  • Security testing experience
  • Security architecture experience
JavaC#C++Security Engineering

How you match

See how your skills match this role — and what to learn to close the gap.

Unlock

Company hiring signal

See whether Cyber Instincts AB is scaling up or slowing down, from its posting history.

Unlock

Original posting

English

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås. The role in short You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work. What you'll be working on Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance Risk-assessing products and making sure actions are actually implemented, not just documented Owning and coordinating security work within development projects – being the person who holds the whole picture together Planning and running various types of security testing Mapping attack surfaces and building threat models for the products Reviewing source code with a security lens Contributing to system hardening, including image management for Windows environments Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it Being involved when security requirements are defined for new features Developing and implementing concrete security solutions, for both embedded systems and traditional applications Driving vulnerability management – from discovery to remediation Writing the documentation that's needed: architecture descriptions, processes, agreement materials Preparing development teams ahead of security reviews Keeping an eye on emerging threats, vulnerabilities, and security updates Reviewing how well suppliers live up to the security requirements set for them Acting as a point of contact for both local and global security functions Who are we looking for? We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles. It's an extra plus if you have experience with any of the following: Embedded systems and firmware C / C++ VHDL / Assembler Real-time operating systems (RTOS) C# / Java Windows environments and Windows-based applications Secure architecture and implementation Vulnerability management and security testing If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out. The assignment Location: Västerås, on-site Start: October 12, 2026 Duration: through March 31, 2027 Scope: Full-time

Shown in its original English. To apply, continue to the company's own page.