Security Engineer - Cyber Security Defense Center

Company Description

H&M Group is on a journey to meet and exceed our customers' expectations today and tomorrow. Through collaboration, innovation, and technology we challenge ourselves and the industry. To cater to the individual needs and desires of our millions of customers, our tech organization delivers solutions for the entire value chain for all our brands.

Job Description

The Cyber Defence Centre (CDC) is a key security function at H&M Group, forming the last line of defense when other security controls fail, safeguarding company staff and assets 24/7.

To perform its job of security monitoring, analysis and incident response, the CDC relies on a wide set of modern security tooling, functions, and data. Engineering is an integrated part of the CDC and is responsible for managing and developing the tooling used by the security analysts daily.

CDC Engineering is currently a 6-person team and we're growing! The team works according to agile/DevSecOps methods with continuous deployment and is a diverse team with different skill sets ranging from deep knowledge in SIEM-systems to coding and cloud skills. The technologies we work with daily are Azure/GCP for our environments, GitHub actions/workflows for CI/CD, Terraform/ARM/Ansible/Kubernetes for IAC and config management, Python. typescript and other various languages for programming and scripting solutions.

Technical stack we're using:

• Programming languages: Python
• FaaS: Azure Function
• Cloud technologies: Azure & GCP
• Containers: Kubernetes, Docker
• SIEM/SOAR: Azure Sentinel
• CICD & DevSecOps practices
• GitHub and GitHub Actions
• IaC with Terraform

Qualifications

• Able to own and work on complex tasks.
• Experience with agile/DevSecOps practices
• Senior engineering skills, 6-8 years of experience as an engineer
• Be able to work in an agile and dynamic environment where requirements can change based on threat landscape and incidents.
• Be able to be a strong representative for the team in internal and external dialogues.
• High proficiency in English - verbal and written.

Technical requirements:

• High proficiency in at least one programming language.
• High proficiency in cloud, Azure or GCP is preferred.
• Experience of container technology in cloud, preferably Kubernetes and Docker
• Experience working with CI/CD

Nice to have:

• Proficiency in GitHub
• Proficiency in Terraform
• Proficiency in Python programming language
• Proficiency in Azure Sentinel
• Architectural skills regarding system architecture
• Technical cyber security experience, primarily in SIEM/SOAR, SOC-ops

Additional information

Working with tech at H&M Group

Shaping the future of fashion with people, data, and tech. The fashion and retail industries are going through a transformation, driven by customers' technology and sustainability expectations. At H&M Group, we want to shape the future of fashion and lifestyle by harnessing the power of smart tech and data. With our 74-year history of innovation, we understand the need to collaborate and co-create with engineers and tech specialists around the world to achieve our vision.

What we offer:

You are joining a unique value-driven culture, a large tech network and community where you can be yourself. Besides the obvious perks such as staff discount card, flexible work life, learning communities, wellness benefits, parental benefits etc. There are endless opportunities to experiment and grow in any direction that you want, and when you grow, we grow. Being a major player gives us countless opportunities to make a real impact and shape the future.

Sounds interesting?

This is a full-time position based in Stockholm. If you feel that your experience, skills and ambitions are right for this role, please apply as soon as possible.

We look forward to receiving your application!

H&M Group is committed to creating a Diverse & Inclusive environment and we are actively looking for qualified candidates irrespective of race, gender, gender identity, sexual orientation, ethnicity, religion, national origin, disability or age.