Senior Cyber Defense Engineer – Detection & Automation

Volvo Group; Göteborgs kommun; On-site; SEK 900,000 - 1,100,000; Full time

Job summary

Volvo Group is seeking a senior security engineer to join the global Cyber Defense Center. You will design and operate a software-defined security platform, applying Everything-as-Code to detect, respond, and adapt across the enterprise.

Join DTO to work in agile, cross-functional teams, shaping the security architecture with modern tooling, AI readiness, and strong collaboration across Volvo Group entities worldwide.

Qualifications

• Strong collaboration and communication bridging engineering and SOC.
• Solid background in SOC and/or SecOps engineering.
• Proficiency in Python or PowerShell, APIs, and data structures.
• Expertise in Splunk SPL, KQL, SQL and security scripting.
• Experience with Git and CI/CD for infra and logic as code.
• Hands-on with enterprise security controls (XDR/EDR/NDR, Firewalls, DLP).
• Deep knowledge of attacker tactics and deception assets.

Responsibilities

• Engineer Detection-as-Code using KQL, SPL, SQL, Python with version control.
• AutomateThreat Response by building modular playbooks.
• Deception Engineering with canaries and honeytokens.
• Tune security controls (XDR, firewall, cloud security, DLP).
• Translate analytical needs into architecture and code.
• Integrate data models, APIs, and threat intel for AI workloads.
• Develop detection across SIEM, data lakes, S3 storage, federated search.
• Close detection gaps and hand over to technical teams.
• Maintain CI/CD pipelines with automated validation gates.

Skills

Collaboration

Core Security

Engineering Mindset

Query languages

GitOps & CI/CD

Security tooling

Active defense

Tools

Python

PowerShell

Docker

Terraform/Bicep

Job description

Volvo Group is seeking a senior security engineer to join the global Cyber Defense Center. You will design and operate a software-defined security platform, applying Everything-as-Code to detect, respond, and adapt across the enterprise.

Join DTO to work in agile, cross-functional teams, shaping the security architecture with modern tooling, AI readiness, and strong collaboration across Volvo Group entities worldwide.