Cyber Security Engineer SOC

Role: Cyber Security Engineer
Job Ref Id: JD-1259
Competence level: Senior
Start date: 2026-10-19
End date: 2027-03-31
Extension option: Yes
Scope: 100%
Location: Stockholm
Remote work: 1 day per week
Language: English
Application deadline: 2026-10-26
Number of consultants: 1
Security clearance: No

About the assignment

We are looking for a Cyber Security Engineer - SOC. Senior level. Start: asap. End: 31st March 2027.

Responsibilities

• Engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows

• Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps

• Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams

Requirements

Mandatory

• Strong practical experience in SOC or Cyber Defense Engineering

• Hands-on Microsoft Sentinel and Defender XDR experience

• Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering

• Senior technical lead or principal level individual contributor, formal personnel management experience is not required but the consultant must have successfully led SOC engineering initiatives and improved engineering processes across multiple teams.

• The person must be able to assess an immature or unclear operating environment, propose pragmatic structure, drive implementation (not merely product recommendations)

Nice-to-have

• Experience with SOAR, MSSP integrations and security platform lifecycle management is highly desirable