Cyber Defense Lead

Solvex Solutions; Stockholms kommun; On-site; SEK 1,200,000 - 1,800,000; Full time

Job summary

Solvex Solutions seeks an experienced Cyber Defense Lead to provide interim operational leadership across Cyber Defence and Security Operations. You will lead the SOC, incident response, threat follow-up, and major security incidents while driving improvements in response times and detection coverage.

Duration is until 31 August 2027 with possible extensions, and you will coordinate internal teams and external security providers as the Cyber Defence SME, translating complex findings into

Qualifications

• Extensive experience leading or coordinating SOC teams.
• Proven track record in incident response and threat investigation.
• Experience managing major/P1 cybersecurity incidents.
• Hands-on knowledge of Microsoft Sentinel and Microsoft XDR.
• Familiarity with Palo Alto security technologies.
• Excellent stakeholder management and communication skills.

Responsibilities

• Lead and coordinate day-to-day Security Operations (SOC).
• Drive Incident Response, threat investigation, and follow-up.
• Lead P1 and major security incidents, including outside normal hours when required.
• Improve MTTR and overall incident-response effectiveness.
• Increase security monitoring and detection coverage.
• Ensure vulnerabilities, threats, risks, and remediation actions are followed through.
• Coordinate internal teams and external security providers as the Cyber Defence SME.
• Translate technical security findings into clear actions and management reporting.

Skills

SOC leadership

Incident response

Security operations coordination

Threat investigation

Threat follow-up

Security incident management

Communication

Stakeholder management

Operational leadership

Tools

Microsoft Sentinel

Microsoft XDR

Palo Alto

Job description

We are looking for an experienced Cyber Defense Lead to provide interim operational leadership and continuity across Cyber Defence and Security Operations. The role will lead the SOC, incident response, threat follow-up, and major security incidents, while driving improvements in response times and detection coverage.

Duration: Until 31 August 2027 + Extensions

Key Responsibilities

• Lead and coordinate day-to-day Security Operations (SOC).
• Drive Incident Response, threat investigation, and follow-up.
• Lead P1 and major security incidents, including outside normal hours when required.
• Improve MTTR and overall incident-response effectiveness.
• Increase security monitoring and detection coverage.
• Ensure vulnerabilities, threats, risks, and remediation actions are followed through.
• Coordinate internal teams and external security providers as the Cyber Defence SME.
• Translate technical security findings into clear actions and management reporting.

Key Requirements

• Strong background in SOC, Incident Response, and Cyber Defence.
• Proven experience leading or coordinating Security Operations/SOC teams.
• Hands-on knowledge of Microsoft Sentinel and Microsoft XDR.
• Experience with Palo Alto security technologies.
• Experience managing major/P1 cybersecurity incidents.
• Understanding of modern identity and non-human identity risks.
• Excellent stakeholder management and communication skills.
• Ability to combine operational leadership with hands-on security expertise.