Cyber Security Engineer SOC

Aqilea; Stockholms kommun; Hybrid; SEK 950,000 - 1,250,000; Full time

Job summary

Aqilea in Stockholm is seeking a Senior Cyber Security Engineer - SOC to join on a 100% assignment from now until March 31, 2027. The role focuses on engineering and strengthening SOC capabilities across Microsoft Sentinel, Defender XDR, and security workflows.

You will lead SOC engineering initiatives, establish processes, and collaborate with cross‑functional teams to drive pragmatic security improvements in a demanding environment with one remote day per week.

Qualifications

• Strong practical experience in SOC or Cyber Defense Engineering.
• Hands-on Microsoft Sentinel and Defender XDR experience.
• Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering.
• Senior technical lead or principal level with proven SOC initiatives.
• Ability to assess immature operating environments and drive implementation.

Responsibilities

• Engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows
• Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps
• Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams

Skills

SOC expertise

Microsoft Sentinel

Defender XDR

SIEM engineering

Telemetry onboarding

Log pipelines

Detection engineering

Technical leadership

Process improvement

Tools

Microsoft Sentinel

Job description

About The Assignment

We are looking for a Cyber Security Engineer - SOC. Senior level. Start: asap. End: 31st March 2027.

Role: Cyber Security Engineer
Job Ref Id: JD-1259
Competence level: Senior
Start date: 2026-10-19
End date: 2027-03-31
Extension option: Yes
Scope: 100%
Location: Stockholm
Remote work: 1 day per week
Language: English
Application deadline: 2026-10-26
Number of consultants: 1
Security clearance: No

About The Assignment

We are looking for a Cyber Security Engineer - SOC. Senior level. Start: asap. End: 31st March 2027.

Responsibilities

• Engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows
• Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps
• Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams

Requirements

Mandatory

• Strong practical experience in SOC or Cyber Defense Engineering
• Hands-on Microsoft Sentinel and Defender XDR experience
• Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering
• Senior technical lead or principal level individual contributor, formal personnel management experience is not required but the consultant must have successfully led SOC engineering initiatives and improved engineering processes across multiple teams.
• The person must be able to assess an immature or unclear operating environment, propose pragmatic structure, drive implementation (not merely product recommendations)

Nice-to-have

• Experience with SOAR, MSSP integrations and security platform lifecycle management is highly desirable