Cyber Security Engineer
Summary
A full-time contract Cyber Security Engineer (through Feb 2027) working on-site 4 days a week in Stockholm to engineer and improve SOC capabilities using Microsoft Sentinel, Defender XDR, SIEM/log pipelines and detection engineering, while leading technical initiatives and establishing security engineering processes across teams.
Period from: ASAP
Period to: 2027-02-28
Location: On-site in Stockholm 4 days week
Scope: 100 %, full-time
Daily tasks:
engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows
Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps
Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams
Skills:
Strong practical experience in SOC or Cyber Defense Engineering
Hands-on Microsoft Sentinel and Defender XDR expeerience
Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering
Experience with SOAR, MSSP integrations and security platform lifecycle management is highly desirable
Leadership:
Senior technical lead or principal level individual contributor, formal personnel management experience not required but the consultant must have successfully led SOC engineering initiatives and improved engineering processes across multiple teams.
The person must be able to assess an immature or unclear operating environment, propose pragmatic structure, drive implementation (not merely product recommendations)
Required cloud certification: Azure certifications are beneficial but