Cybersecurity Specialist

Are you the kind of person who builds security into products from the ground up, rather than bolting it on afterward? We're looking for a cybersecurity specialist to join an industrial product development team in Västerås. The role in short You'll act as the bridge between cybersecurity and the technical development organization. On a day-to-day basis, you'll work closely with software developers, system architects, and other technical profiles to make sure security is built in from the design phase onward. A particular focus of the assignment is navigating the new requirements under the EU Cyber Resilience Act (CRA) and turning them into concrete, everyday actions within the development work. What you'll be working on

Mapping out where the organization currently stands on cybersecurity and charting the path toward CRA compliance

Risk-assessing products and making sure actions are actually implemented, not just documented

Owning and coordinating security work within development projects – being the person who holds the whole picture together

Planning and running various types of security testing

Mapping attack surfaces and building threat models for the products

Reviewing source code with a security lens

Contributing to system hardening, including image management for Windows environments

Making sure teams follow a secure development lifecycle (SDLC) and identifying ways to improve it

Being involved when security requirements are defined for new features

Developing and implementing concrete security solutions, for both embedded systems and traditional applications

Driving vulnerability management – from discovery to remediation

Writing the documentation that's needed: architecture descriptions, processes, agreement materials

Preparing development teams ahead of security reviews

Keeping an eye on emerging threats, vulnerabilities, and security updates

Reviewing how well suppliers live up to the security requirements set for them

Acting as a point of contact for both local and global security functions

Who are we looking for? We think you have a solid foundation in cybersecurity tied to product development – ideally with roots in software development, system architecture, or embedded systems. You're comfortable stepping into development teams and giving hands-on support, not just delivering reports. Since the role involves a lot of collaboration – both locally and internationally – you need to be confident communicating with many different types of technical profiles. It's an extra plus if you have experience with any of the following:

Embedded systems and firmware

C / C++

VHDL / Assembler

Real-time operating systems (RTOS)

C# / Java

Windows environments and Windows-based applications

Secure architecture and implementation

Vulnerability management and security testing

If you've also worked practically with CRA, IEC 62443, secure development lifecycle, threat modeling, or security architecture – great, but it's not a requirement to reach out. The assignment

Location: Västerås, on-site

Start: October 12, 2026

Duration: through March 31, 2027

Scope: Full-time