Cyber Security Engineer SOC
Senior-level contract role in Stockholm for a Cyber Security Engineer to engineer and improve SOC capabilities built on Microsoft Sentinel and Defender XDR — SIEM/telemetry pipelines, detections, integrations and analyst workflows — while leading technical initiatives across cyber defense and platform teams. On-site with 1 remote day per week, running until March 2027.
- Compensation
- Not disclosed
- Location
- Stockholm, Sweden
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Strong practical experience in SOC or Cyber Defense Engineering
- Hands-on Microsoft Sentinel and Defender XDR experience
- Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering
- Senior technical lead or principal level individual contributor who has successfully led SOC engineering initiatives and improved engineering processes across multiple teams
- Able to assess an immature or unclear operating environment, propose pragmatic structure and drive implementation
- English language proficiency
Nice to have
- Experience with SOAR, MSSP integrations and security platform lifecycle management
Full description
Role: Cyber Security Engineer
Job Ref Id: JD-1259
Competence level: Senior
Start date: 2026-10-19
End date: 2027-03-31
Extension option: Yes
Scope: 100%
Location: Stockholm
Remote work: 1 day per week
Language: English
Application deadline: 2026-10-26
Number of consultants: 1
Security clearance: No
About the assignment
We are looking for a Cyber Security Engineer - SOC. Senior level. Start: asap. End: 31st March 2027.
Responsibilities
- Engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows
- Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps
- Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams
RequirementsMandatory
- Strong practical experience in SOC or Cyber Defense Engineering
- Hands-on Microsoft Sentinel and Defender XDR experience
- Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering
- Senior technical lead or principal level individual contributor, formal personnel management experience is not required but the consultant must have successfully led SOC engineering initiatives and improved engineering processes across multiple teams.
- The person must be able to assess an immature or unclear operating environment, propose pragmatic structure, drive implementation (not merely product recommendations)
Nice-to-have
- Experience with SOAR, MSSP integrations and security platform lifecycle management is highly desirable