Cyber Security Engineer

Deploja-Ab; Solna kommun; On-site; SEK 900,000 - 1,200,000; Full time

Job summary

Deploja-Ab in Stockholm is seeking a skilled SOC/Cyber Defense engineer to shape and improve security operations capabilities. The role emphasizes hands-on engineering, telemetry integration, and robust detection engineering within a SOC environment.

The position focuses on platform engineering with Microsoft Sentinel/Defender XDR, SIEM pipelines, and lifecycle management of security tooling and processes. Based in Stockholm, this role is on-site with strong collaboration across teams.

Qualifications

• Strong experience in SOC or Cyber Defense Engineering, including building and improving SOC capabilities and analyst workflows.
• Hands-on with Microsoft Sentinel and Defender XDR, including platform engineering, configuration, monitoring, and telemetry.
• Extensive SIEM experience, telemetry onboarding, log pipelines, integrations and detection engineering.
• Experience with security engineering processes, SOAR/MSSP, lifecycle management, change control and technical documentation.

Skills

SOC/Cyber Defense Engineering

Security platform engineering

Telemetry & logs

SIEM engineering

Detection engineering

SOAR

MSSP lifecycle management

Tools

Microsoft Sentinel

Defender XDR

Job description

Essential requirements:

• SOC / Cyber Defense Engineering Strong practical experience in SOC or Cyber Defense Engineering, including engineering and continuously improving SOC capabilities, security operations processes and analyst workflows. Experience assessing existing/immature SOC environments, identifying gaps and implementing pragmatic improvements rather than providing recommendations only.
• Microsoft Sentinel & Defender XDR Hands‑on production experience with Microsoft Sentinel and Microsoft Defender XDR, including security platform engineering, configuration, monitoring, integrations, security telemetry and operational use within a SOC/Cyber Defense environment.
• SIEM, Telemetry, Log Pipelines & Detection Engineering Strong hands‑on experience with SIEM engineering, security telemetry onboarding, log/data pipelines, security integrations and detection engineering, including development, tuning and continuous improvement of detections and security monitoring capabilities.
• Security Engineering Processes, SOAR/MSSP & Lifecycle Management Experience establishing/improving engineering processes covering service ownership, lifecycle management, change control, monitoring, technical documentation, risk tracking and technical roadmaps. Experience with SOAR and/or MSSP integrations and security platform lifecycle management is highly desirable.and MS Office/documentation/presentation skills are advantageous.

Utilization:100%

Location:Stockholm

Period:01-11-2026-28-02-2027

Last day to apply: 21-10-2026