Cyber Engineer, Cyber Security, Group Digital

Join us on a journey where the journey is more important than the destination. Our guiding star is the better everyday life of the many people and our impetus is our desire for constant renewal. Come help us shape the map of our future by seeing things a little differently.
WHO YOU ARE
You are genuinely curious about the IKEA business and always strive to understand and contribute to our vision. You always seek the necessary context to take best practices beyond a cliché into sound business practices. You wish to work with the best people in data privacy and security on a multi-national stage.
What you bring to the table:
A mindset of finding out the vulnerabilities in large complex IT network, infrastructure, and its components, applications, and services.
Insight into how hackers exploit the human element to gain unauthorized access to secure networks.
A detailed eye to analyze and understand enterprise level networking ecosystems and their elements to find exploitable in the infrastructure of an organization.
Good Understanding of various network topologies, infrastructure components (e.g., router/switches/FW/DNS/servers etc.) and their potential exploitable areas.
The drive to create improvements in existing security services, including hardware, software, policies, and procedures.
An energy to work both independently, interdependently and cross functionally.
Strong analytical skills and passion for working cyber security field.
A team player who can effectively work with all other stakeholders to collaborate, and navigate through the organization structure effectively to get the things done.
Understanding/knowledge of technical cyber security technologies and modern security concepts.
An appetite to keep up to date with new technologies and how they could be used to improve security testing of networks and infrastructures.
An ability to guide yourself into unexplored areas of cyber security.


Background:
Experienced in finding out the threats through a structured way (manual and tool-based threat modelling) in wired/wireless networks considering both physical/non-physical assets.
Experienced in surfacing and remedying various network vulnerabilities (Malware, outdated or bugged software, social engineering attacks, misconfigured firewalls or OS, etc.) in wired/wireless devices.
Must have experience of running various network penetration testing tools for e.g., Nessus, Metasploit, wireshark, nmap etc.
Excellent understanding of cyber security risks and threats.
Good understanding of basic networking concepts (VLAN, WAN, NATing, DNS, Switches, Routers etc.) .
Good understanding of any of one public cloud from IaaS perspective.
A clear understand the importance of physical security of various OT devices (Surveillance Cameras, smart displays, sensors etc.)
Ability to spot cyber security posture gaps and generate recommendations for improvements.
A strong understanding of how cyber security risks and threats can impact related business.
A willingness to learn and contribute to continuously improve processes and drive network security operations proactively
A certification in network penetration testing is advantageous however it is not a must have requirement.
Candidate should have computer science / engineering background.



You will have plenty of opportunities to learn and to improve your profile within cyber security area and you will receive training relevant to your area and for qualifying you in other areas.
WHAT YOU’LL BE DOING DAY TO DAY
You will be joining the Cyber Engineering Team for one of the domains in IKEA
With a threat modelling mindset working along with the infrastructure/network team identifying and remedying cyber security risks and threats
Involved in penetration testing and vulnerability assessment activities of network systems, components and its applications, operating systems, wired and wireless networks, and OT devices. It also includes ensuring the physical security of devices.
Determining the Cyber Security scope and requirements for projects.
Planning and executing tests, documenting your methodologies, creating detailed reports about your findings.
Consult with infrastructure team, application developers, systems administrators, vendors, and management to demonstrate security testing results, explain the threats presented by the results, and consult on remediation
Communicate security issues to a wide variety of internal and external stakeholders to include technical teams, executives, risk groups, vendors and regulators
Understand and explain the results with impact on business and compliance status
Stay updated on the latest malware and security threats
Navigating your work through various stakeholders.
Helping creating and implementing policies and procedures around network, infrastructure and security controls.



Our responsibility is to enable and support our network/infrastructure team to secure the network and infrastructure, by operationalizing the IKEA strategy for Security & Privacy by Design. We support one of the domains in IKEA by translating security and privacy findings into actionable risks and proposed mitigations that they can use to make informed and conscious decisions.
You will be working with the Cyber Engineering Manager, the Cyber engineering lead and infrastructure team for carrying out day to day tasks in the domain.
You may also need to travel to physical site to take a closer look of infrastructure and network systems deployed in various locations.
We are a new team within IKEA, and you will have plenty of opportunities to influence the ways of working and help develop best practices. As innovation is a part of the IKEA DNA, we encourage you to be innovative and create space for you to bring your own ideas to life.
QUESTIONS AND SUPPORT? LET'S CONNECT!
Your internal title in the organization will be Cyber Engineer. This position is placed in Malmö, Sweden. The selection process will take place continuously.