Junior Information Security Officer

Join Spotify as a Senior Security Engineer in our Enterprise Security team, where you'll play a critical role in safeguarding our digital assets. Your expertise will help us build robust security solutions that protect user data and ensure compliance with industry standards.

About UsAt Legora, we are on a transformative mission to revolutionize the legal profession. We work hand-in-hand with legal experts, crafting solutions that genuinely address their needs, ensuring our offerings are not just theoretical but practical and effective.Our innovative AI-driven workspace enables legal professionals to not only enhance their efficiency but also to ask insightful questions and uncover deeper insights. We relentlessly push the limits of legal technology, streamlining intricate processes to be more intelligent, faster, and more human-centric. Our collaboration with prestigious firms such as Cleary Gottlieb, Goodwin, Bird & Bird, and Linklaters across 40+ countries is a testament to our commitment to quality and speed.Joining Legora means becoming part of a team that values excellence and collaboration. We believe that mediocrity is not an option, and together we empower lawyers to realize their full potential through technology that comprehends their unique requirements. If you’re eager to innovate from the ground up, work alongside remarkable individuals, and drive change in a critical sector, then this is your opportunity.Join us in shaping the future of legal technology!The Role:Security is our top priority at Legora. We are seeking a Senior Application Security Engineer who possesses the ability to think like an attacker, build like a developer, and operate like an SRE. In this pivotal role, you will engage with our entire technology stack, encompassing Azure cloud infrastructure, JavaScript and Python services, as well as our AI integrations and workflows. Your mission is to guarantee that everything we develop is secure-by-default and resilient to ever-evolving threats.At Legora, we believe that merely shifting security left is not enough; our aim is to establish a secure and resilient ecosystem for our engineers, allowing them to develop future features with confidence and agility.*This position is based in our Stockholm office, requiring you to be on-site five days a week, as we believe in the power of collaborative, in-person work.Key Responsibilities:Integrate security practices throughout our software development lifecycle by conducting design reviews, threat modeling, and secure coding.

Join our team at hmgroup as a Senior Cyber Security Engineer, where you'll be at the forefront of safeguarding our digital assets. In this pivotal role, you will leverage your expertise in cybersecurity to identify vulnerabilities, implement robust security measures, and ensure compliance with industry standards. Collaborate with cross-functional teams to enhance our security posture and contribute to innovative projects that drive our mission of delivering secure solutions to our clients.

About Trustly Trustly is building a smarter, faster, and more secure financial future by transforming how payments work. As a global leader in Open Banking Payments, Trustly sets the standard for 'Pay by Bank' at checkout, giving millions of consumers and merchants worldwide more freedom, speed, and convenience. The company’s ambition is to create the world’s most innovative payment network and redefine the payment experience. Trustly’s team brings together people from diverse backgrounds who value innovation, collaboration, and achievement. The company values a strong sense of purpose and welcomes those who thrive in an entrepreneurial setting. Security and Compliance Team To reach its goal of becoming the top global online banking payments provider, Trustly is strengthening its information and cybersecurity capabilities. The organization is currently reorganizing its security structure to support scalability and growth. The Security and Compliance team is expanding and looking for Security Engineers focused on product security across Europe. Role Overview: Security Engineer As a Security Engineer at Trustly in Stockholm, you will work with a group of security professionals committed to integrating security throughout the company’s operations and development processes. The team uses its expertise to deliver security services and automates security controls where possible. With the team growing, Security Engineers will have the chance to shape team practices and direction. This role offers the opportunity to influence how Trustly interacts with merchants and to make a direct impact on the company’s operational security framework.

Overview: Join our dynamic team as an Application Security Engineer, where you will lead the charge in embedding security throughout our entire software development lifecycle. Your role will be crucial in conducting code reviews, designing secure features, and mentoring fellow engineers to prioritize security in all our creations. If you possess a deep passion for application security and excel in collaborative environments, this is your calling.Why Choose Lovable?At Lovable, we empower individuals to create software using simple English. Our platform is embraced by solo entrepreneurs to Fortune 100 teams, with millions transforming ideas into secure products quickly. We are at the forefront of revolutionizing software development, and your expertise will be instrumental in establishing security standards for this new era. With over 2 million users across 200+ countries, our impact is global and expanding rapidly.As a small, agile team based in Stockholm, we value ownership, speed, and a collaborative spirit. We seek individuals who are passionate, quick to act, and eager to make a significant impact.Your ContributionsOver 5 years of experience in application security, focusing on cloud-native environments within product-driven tech companies, high-growth startups, or leading AI laboratories.Proficient in programming and engineering.Extensive knowledge in application security, including secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management.Strong foundation in securing engineering infrastructure, including CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud platforms.Practical experience in collaborating with developers to design and implement robust security features and best practices.A genuine enthusiasm for educating and mentoring engineers on secure coding practices, vulnerability remediation, and emerging threats.A systems mindset, comfortable contributing to codebases, developing security tools, and integrating security measures into engineering workflows.Bonus: Experience in building internal security tools or contributing to open-source security projects.Your ResponsibilitiesConduct secure code reviews, threat modeling, and architecture assessments to proactively identify and mitigate vulnerabilities.Collaborate with engineering teams to design and implement security features, providing actionable feedback and best practices.

Join Our Mission at LegoraAt Legora, we are revolutionizing the legal industry by building innovative solutions in collaboration with legal professionals. Our AI-driven workspace not only increases efficiency but also empowers lawyers to ask insightful questions and uncover valuable insights. We are committed to enhancing legal tech by making complex processes more intuitive and human-centric.Trusted by esteemed firms such as Cleary Gottlieb, Goodwin, Bird & Bird, and Linklaters across over 40 countries, we are just getting started. Our agile approach allows us to iterate quickly and scale effectively, ensuring we deliver top-tier solutions by design.Joining Legora means becoming part of a team that refuses to settle for mediocrity. We believe in collaboration and in providing lawyers with technology that truly understands their needs. If you're passionate about building impactful solutions from the ground up and thrive in a fast-paced, high-stakes environment, we invite you to be part of our journey.Be a Part of the Future of Legal Tech with Us!The Role: We place a high priority on security at Legora. We are seeking talented Detection & Response engineers to proactively detect, investigate, and respond to evolving threats. This role offers you the chance to define our security capabilities and establish a benchmark for modern threat detection and response practices.*This position is based in our Stockholm HQ and requires working in-office five days a week, as we believe in the power of teamwork and collaboration.Your Responsibilities:Lead cybersecurity incident response initiatives across various domains, addressing both external attacks and insider threats.Design and manage tools to enhance our detection, investigation, and response strategies.Establish and maintain detection capabilities, workflows, and playbooks to swiftly identify, respond to, and remediate security incidents.

Join our team as a Security Architect where you will play a crucial role in designing and implementing robust security frameworks for our clients. You will collaborate with cross-functional teams to identify vulnerabilities and recommend solutions that protect sensitive information and systems. Your expertise in security architecture will help us enhance our cybersecurity posture.

Join Us as a Fullstack Engineer in AI Code Security! At Lovable, we are on the lookout for a passionate Fullstack Engineer who is dedicated to advancing AI code security. In this role, you will be at the forefront of designing and implementing robust static code analysis and security scanning capabilities, ensuring that Lovable remains the premier AI-powered software creation platform globally.Why Choose Lovable?Lovable empowers individuals and teams to develop software using plain English. Our platform is utilized by a diverse range of users, from solo entrepreneurs to Fortune 100 companies, allowing millions to turn their ideas into tangible products swiftly. We are spearheading a transformative shift in software development, providing you with a unique opportunity to make a significant impact in the digital landscape. With a user base exceeding 2 million across over 200 countries, our influence is vast—and we are just getting started.Based in Stockholm, we are a small yet highly skilled team committed to building a company that will define a generation. We prioritize ownership, rapid iteration, and collaborative efforts with minimal ego. We are looking for individuals who are deeply passionate about their craft, who will challenge us, and who are motivated to create lasting change.Key Qualifications3+ years of experience in code security, static analysis, or code scanning, preferably with a focus on security-centric products (SAST, linters, vulnerability scanners, or similar utilizing AI or sophisticated machine learning techniques).5+ years of full-stack engineering experience delivering high-quality software products.Expertise in modern frontend technologies (React/TypeScript) and backend programming (Golang, Rust).Comprehensive understanding of system design, performance trade-offs, and scalable architectures.Strong product insight with the ability to convert security insights into user-friendly and actionable experiences.Bonus: A Master’s or PhD in code analysis, static analysis, or a related discipline. Experience in integrating AI/LLMs into security tools. Knowledge of mobile application security scanning.Your ResponsibilitiesDevelop our code scanning engine: Architect and execute static analysis and security scans that identify issues within user-generated application code for both web and mobile platforms.Deliver features end-to-end, spanning frontend, backend, and infrastructure alongside a compact, autonomous team (≤3 engineers).Incorporate AI/LLM functionalities into security workflows to detect, elucidate, and resolve vulnerabilities.Promote secure coding practices, perform security-focused code reviews, and elevate standards across the engineering organization.Shape our technical trajectory and product roadmaps.

OverviewLovable is seeking a Senior Product Manager to lead the Security domain, overseeing the entire lifecycle from ideation to launch. Your mission will be to ensure that the millions of applications developed on Lovable are inherently safe, reliable, and secure, transforming security from a mere compliance checkbox into a true competitive advantage.Why Join Lovable?At Lovable, we empower individuals and teams across the globe to create software using any programming language. From solo entrepreneurs to major Fortune 100 companies, millions rely on Lovable to swiftly convert their concepts into tangible products. We are at the forefront of a transformative shift in software development, providing you an unparalleled chance to reshape the digital landscape. With over 2 million users across 200+ countries, Lovable is revolutionizing business creation and workflow automation. Our compact, high-caliber team in Stockholm is dedicated to building a company that defines a generation. We prioritize extreme ownership, rapid execution, and collaborative spirit, looking for passionate individuals who are driven to make an impactful difference.Key QualificationsMinimum of 6 years in the software industry with a focus on security, trust & safety, or platform integrity in product management or engineering leadership roles.Understanding of the unique security challenges associated with AI-generated software, such as code vulnerabilities and prompt injection, with a proven ability to create secure user experiences.Technical fluency with programming experience, capable of engaging effectively with engineers on security threats and platform architecture.Strong product intuition and systems thinking, adept at converting security limitations into positive user experiences while having clear viewpoints on how security should be presented.Preferred: Experience in platform security or trust & safety at scale, with knowledge of enterprise security requirements and their influence on product decisions.Your ResponsibilitiesAct as the voice of the user by presenting insights on security posture, threat models, and trust signals to the team with clarity and conviction.Conduct end-to-end discovery processes including user interviews, competitive analysis, and data interpretation to craft impactful security messaging.

Role overview hmgroup is hiring a Cyber Security Manager to lead the Cyber Security Architecture Team in Stockholm. This position focuses on building and executing cyber security strategies that protect the organization from new and evolving threats. What you will do Guide the Cyber Security Architecture Team in daily operations and long-term planning Develop and roll out cyber security strategies across the company Work closely with teams from other departments to set security standards and practices Help ensure the organization meets relevant industry compliance requirements Location This role is based in Stockholm.

Join Vattenfall, a leading energy company, as an IT & Information Security Specialist. You will play a vital role in ensuring the integrity and security of our information systems. This is an exciting opportunity for individuals passionate about cybersecurity and committed to protecting sensitive data.Your responsibilities will include developing and implementing security protocols, conducting risk assessments, and collaborating with various teams to enhance our security posture.

Join Us at LegoraLegora is on a transformative mission to redefine the landscape of legal work. We are not merely creating solutions for lawyers; we are collaborating with them to ensure that our innovations meet their real needs, enhancing their workflow and efficacy.Our AI-driven workspace empowers legal professionals to not only work more efficiently but also to ask insightful questions and uncover new perspectives. We continually push the boundaries of legal technology, making intricate processes smarter, faster, and more human-centric. Whether analyzing thousands of documents in minutes or crafting intelligent workflows in partnership with leading firms, we are turning possibilities into tangible outcomes.Trusted by prestigious firms such as Cleary Gottlieb, Goodwin, Bird & Bird, and Linklaters across more than 40 countries, we are committed to rapid iteration, effective scaling, and a culture of excellence. At Legora, we believe that 'good enough' is never sufficient. Together, we empower legal professionals to excel with technology that truly understands their needs. If you are passionate about building from foundational principles and affecting meaningful change in a high-stakes environment, we invite you to join us.Become a part of shaping the future of legal tech!Your Role:At Legora, security is our top priority. We are seeking talented Detection & Response Engineers to help us proactively identify, investigate, and respond to evolving threats. This role provides an opportunity to establish and enhance our technical security capabilities, defining modern practices in threat detection and response.Responsibilities:Lead incident response efforts against cyber security threats, including external attacks and insider threats.Develop and maintain tools to bolster our detection, investigation, and response initiatives.Create and refine detection capabilities, playbooks, and workflows to swiftly identify, respond to, and remediate potential issues.

Join Securitas, a global leader in security services, as a Security Guard in Rosersberg, Stockholm. In this pivotal role, you will be responsible for ensuring the safety and security of designated premises, conducting regular patrols, monitoring surveillance equipment, and providing excellent customer service. We are looking for dedicated individuals who take pride in maintaining a secure environment.

TL;DR Join our innovative Product Security team as a Full Stack Engineer, where you'll develop cutting-edge features that ensure Lovable remains the most secure AI-driven software creation platform in the world.Why Choose Lovable?At Lovable, we empower individuals and teams to develop software using plain English. From solo entrepreneurs to Fortune 100 companies, millions rely on Lovable to rapidly transform ideas into tangible products. We are at the forefront of a transformative era in software development, providing you with a unique chance to influence the digital landscape. With over 2 million users across more than 200 countries, our global reach is expansive, and we're only just beginning.Our small but elite team in Stockholm is dedicated to building a company that defines a generation. We value ownership, swift iteration, and collaborative humility. We are seeking passionate individuals who take pride in their work, challenge the status quo, and are committed to making a meaningful difference.Desired QualificationsA minimum of 5 years of full-stack engineering experience in delivering production-ready products swiftly.Expertise in React/TypeScript for frontend development and Golang for backend services, with a deep understanding that eliminates the need for reference checks.A strong commitment to quality, reflected in every pull request, design decision, and line of code.An innate understanding of product usability, capable of distilling complex functionalities into intuitive user experiences.Experience in developing security-related features such as audit trails, compliance tools, or security scanning interfaces is highly advantageous.Bonus: Familiarity with AI/LLM tools or a background involving intricate algorithmic or systems work.Your ResponsibilitiesDevelop comprehensive security features including audit flows, security scanner interfaces, cookie consent solutions, and compliance tools.Collaborate across the full stack as part of a close-knit team of 2-3 engineers.Take full ownership of your projects, from initial commit to deployment.Uphold and elevate coding standards and quality within the team.Shape technical direction and product strategy through informed opinions.Our Technology StackFrontend: React and Typescript.Backend: Golang and Rust.Cloud Services: Cloudflare, GCP, AWS.

AFRY seeks a Team Leader in Security Protection to guide a team dedicated to maintaining and improving security standards. This Stockholm-based role focuses on protecting both client interests and internal operations. Role overview The Team Leader oversees daily security operations, providing direction and support to team members. The position involves developing and implementing measures that strengthen protection for clients and company assets. Addressing security challenges with practical, forward-looking solutions is central to the work, along with promoting a culture of safety and ongoing improvement. What you will do Lead and support a team responsible for security operations Develop and apply strategies to enhance protection for clients and company resources Respond to security issues with effective, proactive solutions Encourage continuous improvement and a strong safety culture Requirements Background in security protection or a related discipline Proven leadership skills with experience guiding teams Strong problem-solving skills and a strategic approach Dedication to maintaining high safety standards Candidates with a solid foundation in security and team leadership are encouraged to connect with AFRY.

Vattenfall AB is hiring a Business Physical Security Officer in Stockholm to help protect assets and personnel within the Wind department. This position plays a central part in maintaining the safety and security of business operations. Role overview The Business Physical Security Officer focuses on implementing and upholding security protocols. The work supports the ongoing safety of both people and property in a busy operational environment. What you will do Apply and maintain physical security measures for the Wind department Support the protection of business operations, assets, and staff Location This role is based in Stockholm.

We are seeking a dedicated IT Security Consultant to join our dynamic team at Sopra Steria in Stockholm. As an IT Security Consultant, you will play a crucial role in safeguarding our clients' digital assets and ensuring the integrity of their information systems. You will collaborate with cross-functional teams to assess security risks, design robust security measures, and implement best practices to protect sensitive data.Your expertise will help organizations navigate the complex landscape of cybersecurity, making a positive impact on their operational resilience and compliance with industry standards.

Role Overview Securitas Sverige is hiring a Director of Security Operations in Stockholm. This leadership position guides a team focused on delivering high-quality security services across the region. The role plays a central part in shaping and implementing security strategies that protect clients and their assets. What You Will Do Lead and support a team dedicated to security operations Oversee the creation and execution of security strategies Ensure the safety and protection of client assets and environments Location Based in Stockholm.

Make a Lasting Impact in Healthcare!At Tandem Health, we are revolutionizing the healthcare landscape by prioritizing clinicians. Our innovative platform is crafted by clinicians for clinicians, deeply rooted in understanding the real challenges faced in medical practice. With intuitive medical workflows and note-taking features, we aim to enhance patient care significantly.We are a rapidly growing health-tech company backed by leading investors, and we are expanding our footprint globally. Our culture embraces agility, curiosity, and a commitment to creating meaningful solutions begins with an exceptional team. If you are driven by innovation and making a real difference, we would love to connect with you!About the RoleAs the Head of Security, your focus will be on developing robust security systems not just to meet compliance but to foster trust, enabling rapid organizational growth. You will be the architect who understands the interplay between infrastructure, product security, application security, and the human elements involved. Your skills in coding, debugging, process improvement, and team communication will be pivotal.You will lead our initiative to safeguard sensitive data across Europe while facilitating the development of next-gen AI-driven healthcare solutions. Your responsibilities will encompass managing our comprehensive security program—from technical controls and secure software development lifecycle (SDLC) practices to penetration testing and cultivating a security-first culture. Your role will be to set the strategic direction, empower your team, and ensure that security becomes a collective responsibility.This position is ideal for a proactive leader who enjoys both managerial and hands-on tasks, striving to establish a secure-by-design foundation for a dynamic, high-quality engineering team. You will recognize that exceptional security is equally about user experience and collaboration as it is about fortifying systems.Your ResponsibilitiesLead Tandem’s security efforts and define our long-term technical and organizational security strategies, establishing clear ownership, priorities, and operational methodologies.Guarantee the security, reliability, and auditability of our infrastructure, internal systems, and applications.Collaborate closely with the engineering team to integrate security throughout the software development lifecycle (SDLC).Establish and uphold static and dynamic code analysis, dependency scanning, and secure CI/CD integrations.Formulate strategies for networking, authentication, secrets management, and container orchestration security.Develop tools and processes that streamline our security practices.