Cybersecurity Student Assistant

Are you interested in understanding how systems work, investigating security findings and helping colleagues address the underlying issues?

As a Cybersecurity Student Assistant, you will help strengthen the security of the systems and applications that support Heimstaden’s business. Your work will range from investigating vulnerabilities and reviewing security configurations to helping technical teams and business owners understand the risks and agree on what needs to be done.

You will work closely with our CISO, Senior Information Security Officer and colleagues across IT operations and development. This is a practical technical role, with opportunities to work with and get experience with Azure, Google Cloud, GitHub, Azure DevOps and security tools.

You will take ownership of clearly scoped tasks, with guidance from experienced colleagues and increasing responsibility as your skills develop. Technical changes will be planned and carried out together with the teams responsible for the systems.

Key responsibilities
Your tasks will include:

• Investigating vulnerabilities. Review vulnerability findings for servers and applications, help assess the associated risks and support the security team in prioritising remediation efforts.

• Improving security configurations. Help IT operations and development teams review and improve security settings in Azure, Google Cloud, GitHub and Azure DevOps, including access permissions and repository and pipeline settings.

• Supporting patching and remediation. Help test and implement agreed fixes with the responsible teams, follow up on outstanding actions and verify whether vulnerabilities have been addressed.

• Communicating security risks. Explain findings to technical colleagues and business owners so they understand what is affected, why it matters and what action is needed.

Depending on your interests, skills and experience, you may also help improve security processes and reporting, suggest better ways of working and develop scripts or automation that reduce repetitive work.

We are looking for someone who is technically sharp and enjoys investigating technical problems and wants to understand not just what a security tool reports, but what the finding means, the risk it represents, and how it can be addressed.

You are studying cybersecurity, computer science, software engineering or another relevant IT subject, preferably towards the end of your Bachelor’s degree or at the beginning of your Master’s degree. Whatever your field of study, you have a genuine interest in cybersecurity and a clear ambition to develop strong technical expertise in this area.

We want to see how you have put that interest into practice, whether through university projects, a home lab, personal projects or a previous student job. What have you built, investigated or tried to secure, and what did you learn from it? Previous work experience in cybersecurity or practical experience with the technologies used in the role is an advantage.

We also expect that you:

• Have a basic understanding of operating systems, networking and common security concepts.

• Enjoy investigating technical problems, understanding their (root) causes and finding practical ways to improve security.

• Can communicate clearly in English and help explain security findings, why they matter and what action is needed to colleagues with different levels of technical knowledge.

• Work systematically, keep track of your tasks and follow through on agreed actions.

• Take initiative, ask questions and recognise when you need guidance or approval, particularly when working with sensitive information or making changes to live/production systems.

Practical experience with Azure, GitHub, Azure DevOps, Microsoft security tools or Linux is an advantage. Familiarity with vulnerability scanning or scripting in PowerShell or Python is also useful. Your experience can come from your studies, personal projects or previous work.

We do not expect you to know all these tools before joining. However, we do expect genuine technical curiosity, a willingness to learn and an interest in applying what you learn to real security challenges. You will have guidance from experienced colleagues and gradually take on more responsibility as your skills develop and as you deliver good results.

What we offer

• A part-time role (approx. 15–20 hours/week) with flexibility during exam periods

• Close collaboration with the GITS and other Digital teams, where experienced security and IT colleagues can help you broaden your skills and grow both professionally and personally.

• Practical experience with vulnerabilities, cloud security and technical security improvements in a large international company.

• The opportunity to see your work lead to concrete improvements, with responsibilities that grow as your skills develop.

• A culture that brings together sharp minds and encourages you to keep learning, challenge existing ways of working and turn ideas into practical improvements.

Join Us
Apply via our application portal no later than 31 October 2026. We encourage you to apply early, as we conduct interviews on an ongoing basis and will close the vacancy once the position is filled, which may be before the deadline.

Tell us what interests you about technical security and share an example of something you have built, investigated or improved. This can come from your studies, work or personal projects.
Please do not include confidential information from current or previous employers.

We conduct background checks as part of our recruitment process. If you have any questions regarding this, you are welcome to contact us.

At Heimstaden, we value diversity and believe that different perspectives create better decisions and a stronger work environment.

We conduct background checks as part of our recruitment process. If you have any questions regarding this, you are welcome to contact us!

At Heimstaden, we value diversity and believe that different perspectives create better decisions and a stronger work environment.