Job Description

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward?

We're looking for a cybersecurity specialist to join an industrial product development team in Västerås.

The role in short

You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work.

What you'll be working on

• Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance
• Risk-assessing products and making sure actions are actually implemented, not just documented
• Owning and coordinating security work within development projects – being the person who holds the whole picture together
• Planning and running various types of security testing
• Mapping attack surfaces and building threat models for the products
• Reviewing source code with a security lens
• Contributing to system hardening, including image management for Windows environments
• Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it
• Being involved when security requirements are defined for new features
• Developing and implementing concrete security solutions, for both embedded systems and traditional applications
• Driving vulnerability management – from discovery to remediation
• Writing the documentation that's needed: architecture descriptions, processes, agreement materials
• Preparing development teams ahead of security reviews
• Keeping an eye on emerging threats, vulnerabilities, and security updates
• Reviewing how well suppliers live up to the security requirements set for them
• Acting as a point of contact for both local and global security functions

Who are we looking for?

We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles.

It's an extra plus if you have experience with any of the following:

• Embedded systems and firmware
• C / C++
• VHDL / Assembler
• Real-time operating systems (RTOS)
• C# / Java
• Windows environments and Windows-based applications
• Secure architecture and implementation
• Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out.

The assignment

• Location: Västerås, on-site
• Start: October 12, 2026
• Duration: through March 31, 2027
• Scope: Full-time