Interim Cyber Defence Operations Lead

Cyber Instincts AB; Stockholms kommun; Remote; SEK 1.800.000 - 2.400.000; Vollzeit

Benefits dieser Stelle

Remote work 100%

Zusammenfassung

Cyber Instincts AB seeks an experienced security operations leader to serve as interim Cyber Defence Lead for a global manufacturer. You will oversee SOC operations, lead incident response, and strengthen threat detection while ensuring timely follow-up on actions.

Location is Stockholm with up to 100% remote work; start 26 Oct 2026, end 31 Aug 2027, full-time role requiring English proficiency and strong coordination with internal teams and providers.

Qualifikationen

• Strong background in security operations and SOC leadership.
• Experience in incident management from detection to closure.
• Familiarity with enterprise XDR/SIEM platforms and monitoring.

Aufgaben

• Lead and coordinate the SOC day-to-day operations.
• Own incident management and post-incident follow-up.

Kenntnisse

SOC operations

Incident response

Threat management

Security monitoring

Stakeholder comms

English fluency

Tools

Microsoft Defender XDR

Microsoft Sentinel

Palo Alto Cortex

Jobbeschreibung

About The Assignment
We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

• Location: Stockholm, with remote work possible (up to 100%)


• Start: 26 October 2026 (we are looking to fill this as soon as possible)


• End: 31 August 2027


• Scope: Full time (100%)

About The Assignment
We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

• Location: Stockholm, with remote work possible (up to 100%)


• Start: 26 October 2026 (we are looking to fill this as soon as possible)


• End: 31 August 2027


• Scope: Full time (100%)


• Working language: English
  

What You'll Be Doing

• Leading and coordinating the security operations function (SOC) day to day


• Owning incident management and threat follow-up from detection to closure


• Helping lead P1 and major incidents when needed, sometimes outside office hours


• Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage


• Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time


• Coordinating with internal teams and external service providers, acting as the subject matter expert


• Turning technical findings into clear actions and reporting for managers and stakeholders
  

What We're Looking For

• A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team


• Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms


• Experience with vulnerability management and security monitoring


• Understanding of modern identity risks, including privileged and non-human identities


• Strong communication and stakeholder skills, and fluent English


• A calm, structured and proactive approach under pressure
  

Nice to have

• Experience from global or regulated organisations


• Automation of triage and response


• Certifications such as GCIH, GCIA or CISSP