Role & seniority: Senior Security Specialist, Operational Security Center (OSC)

Stack/tools: security tooling (SIEM/SOAR, XDR, issue trackers, CI/CD/SSDLC); application security, threat modelling; cloud testing; frameworks: OWASP, MITRE ATT&CK; risk-based program management

Top 3 responsibilities

Design, establish, and continuously improve SEB’s yearly, risk-based pentest program
Coordinate complex penetration testing engagements and oversee remediation
Set governance, integrate findings into vulnerability management, and translate technical insights for stakeholders

Must-have skills

Several years in cybersecurity, with experience leading pentest/security testing programs in complex, regulated environments
Strong knowledge of attack vectors, application security, threat modelling, cloud testing; familiarity with OWASP and MITRE ATT&CK
Hands-on exposure to security tooling and pipelines (SIEM/SOAR, XDR, issue trackers, CI/CD/SSDLC)
Risk-based thinking and ability to align testing with business/regulatory needs
Excellent communication and collaboration; fluent in English and Swedish

Nice-to-haves

Additional experience in cloud/security governance and cross-functional stakeholder communication
Familiarity with broader security governance processes and regulatory landscape

Location & work type: Sweden; remote work possibilities and flexible schedule; agile/modern ways of working; flat hierarchy

Note: SEB emphasizes incl

Full Description

SEB is more than just a bank with an IT function. We are a progressive tech company powered by innovation and fuelled by collaboration. From Java to AI and everything in between, we offer you an impressive tech stack and several technology paths. Together we’re innovating for a sustainable society and building the tech arena of the future, a welcoming space for everyone. Are you ready to take on a new challenge? If so, you’ll be interested in this opportunity!

About the role

As a Senior Security Specialist in our Operational Security Center (OSC), you will, together with other specialists, build and execute the SEB’s penetration testing program. You’ll design, establish, and continuously improve our yearly, risk-based program, coordinating complex engagements to ensure real risk reduction. This role covers the end-to-end lifecycle, from planning and contracting to oversight and remediation. You will set governance, streamline findings into vulnerability management, and build and run the annual pentest program, translating technical insights into actionable guidance for various stakeholders.

To thrive in this role, we believe you have

Several years in cybersecurity, including some years leading pentest or security testing programs in complex, regulated environments.
Solid grasp of common attack vectors, application security, threat modelling, cloud testing, and familiarity with OWASP, MITRE ATT&CK etc.
Hands-on exposure to security tooling and pipelines (e.g., SIEM/SOAR, XDR, issue trackers, CI/CD/SSDLC).
Strong risk-based thinking, effectively aligning testing scope with business impact and regulatory needs.
Excellent communication and collaboration skills, including fluency in English and Swedish, to present confidently to diverse audiences.

What we offer

Agile and modern ways of working
A flat hierarchy and openness to share ideas, opinions and points of views
Extensive training and learning opportunities
Long-term stability
Remote working possibilities and flexible work schedule

Do you want to be part of SEB? It is our fundamental belief that inclusion and diversity is crucial for our future success. We strive to have an inclusive, value-driven culture where employees feel valued, respected, and involved irrespective of who they are, what they believe or where they come from.

Since we select candidates continuously, feel free to send in your application today via the link in this ad, but no later than 2026-02-02. If you have questions about the position, please contact Torbjörn Askenberg, torbjorn.askenberg@seb.se, note that we will not process applications via email.

Please be aware that our final candidates undergo background checks, a process that includes for example identity control, verification of qualifications, credit checks, company engagements and history of crime. In some cases, we also apply random drug checks.

Learn more about working at SEB on our Career website or through our Career podcasts.

https: //sebgroup.com/career https://bit.ly/SEBcareer

SEB Sweden has a redeployment responsibility, which is why this position might be covered by internal redeployment. \n

IT Security Specialist – Penetration Test Program Specialist | SEB, Sweden, Hybrid