Stockholm, SE (Hybrid)1 open job
Swedish cybersecurity firm founded in 2016, providing penetration testing, risk and vulnerability analysis, OSINT, and DPO/CISO-as-a-service alongside GDPR, NIS2, and ISO 27001 compliance consulting.
Secify is a Swedish cybersecurity firm founded in 2016, working the intersection of information security, data protection, and privacy compliance. The threat model it addresses is broad but concrete: untested attack surfaces, undocumented risk, regulatory exposure under GDPR, NIS2, DORA, ISO 27001, and HIPAA, and the newer problem set around AI security and supply chain integrity. Headquartered in Jönköping, the company operates from four offices across Sweden - Stockholm, Halmstad, and Växjö alongside the HQ - and is part of Secify Group.
The work splits between technical services and compliance advisory. On the technical side: penetration testing, risk and vulnerability analysis, supply chain analysis, and OSINT investigations. On the advisory side: Data Protection Officer as a service, CISO as a Service, and cybersecurity training courses. Clients span multiple sectors, which means the domain surface shifts from engagement to engagement - one week it's a DORA readiness assessment, the next an OSINT investigation or a privacy compliance program.
Secify describes itself as a niche information security firm with a no-nonsense approach to clear, effective solutions and a distinct organizational culture. For security practitioners, the draw is the range of work: offensive testing, intelligence gathering, regulatory frameworks, and AI security in the same portfolio, without the sprawl of a generalist consultancy.
