Assignment description

Our client in the automotive industry is currently seeking a Cybersecurity Specialist for a new cybersecurity function aimed at enhancing ransomware protection and resilience. This role will involve defining new ways of working with security tools, enhancing capabilities to protect against ransomware, and increasing ransomware resilience based on the available technical tools and threat intelligence.

You will work in a flexible team that is part of the Digital Trust Cluster within the Digital Platform, which is a major component of the client’s technological backbone, Digital Core. The main work location is in Gothenburg. While our client values flexibility in the work environment, they also appreciate the benefits of face-to-face communication and close collaboration with your team to achieve great things.

Our client believes that curiosity and a genuine commitment to understanding people are key to future success. They are a team of people who care about others, working together to create new technologies and innovations for safe, sustainable, and convenient mobility.

Main responsibilities:

• Analyze threat intelligence related to ransomware groups and attack methods.
• Define metrics for the company’s proactive and reactive ransomware protection.
• Conduct ransomware exercises/tests and drive mitigative activities.
• Develop protection mechanisms against ransomware attacks and TTPs (Threats, Tactics, and Procedures).
• Review and implement security features in ransomware protection tools.
• Develop collaboration and processes with teams in other departments.

Qualifications:

• Proven experience within cybersecurity.
• Technical understanding of ransomware threats, attacks, and TTPs.
• Good understanding of how to defend against ransomware.
• Project management skills and/or cybersecurity architecture skills.

Skills and experience in one or several of these areas:

• Threat hunting methods and Indicators of Compromise (IOCs).
• Malware and ransomware trends, including RAT/ransomware communication.
• Familiarity with MITRE ATT&CK or similar frameworks.
• Experience in penetration testing, red teaming, or Capture The Flag (CTF) exercises.
• Experience/training in threat intelligence tools and TTPs.
• Incident response/forensics or SOC experience (L1, L2, or L3).
• Experience with managing ransomware breaches and rebuilding large-scale infrastructures.

Other useful qualifications:

• Strong analytical and problem-solving skills.
• Excellent communication and collaboration skills.
• An innovative mindset that can help develop and shape a new function and capability.