Senior SOC Analyst: Threat Detection & IR Lead

Volvo Group; Göteborgs kommun; On-site; SEK 1,100,000 - 1,400,000; Full time

Job summary

Volvo Group is seeking a Principal Cyber Security Analyst to lead and coordinate the SOC, driving advanced threat detection, incident response and playbook development. You will mentor analysts and collaborate with engineering, IT and risk teams to elevate security posture.

You will apply your deep SIEM/SOAR expertise, scripting skills, and cloud know-how to enhance detection capabilities and incident containment across networks, endpoints and cloud environments.

Qualifications

• 10+ years in Security Operations or SOC leadership.
• Proven incident response ownership of high-impact security events.
• Expertise in SIEM/SOAR implementation, detection engineering and automation.

Responsibilities

• Provide technical leadership for advanced threat detection, investigation and response within the SOC.
• Lead high-severity security incidents investigations, including malware analysis and enterprise-wide investigations.
• Drive real-time incident response, coordinating containment, remediation, and post-incident reviews.
• Design, optimize, and maintain detection use cases, monitoring rules, and alert tuning to improve SOC effectiveness.
• Perform deep analysis across networks, endpoints, and cloud environments to identify and mitigate security risks.
• Lead and support proactive threat-hunting initiatives and vulnerability mitigation efforts.
• Collaborate with IT, engineering, digital forensics, and external partners during incident response activities.
• Develop, standardize, and continuously improve SOC playbooks, procedures, and automation workflows.
• Mentor analysts, conduct training and incident response exercises, and perform quality reviews of investigations.
• Act as a subject matter expert, contributing to broader cybersecurity initiatives and continuous improvement programs.

Skills

SOC experience

SIEM

SOAR

Leadership

Python

PowerShell

Cloud security

Active Directory/Entra ID

Threat hunting

Vulnerability mgmt

Education

Bachelor's in CS/InfoSec

Tools

Splunk

XSOAR

Job description

Volvo Group is seeking a Principal Cyber Security Analyst to lead and coordinate the SOC, driving advanced threat detection, incident response and playbook development. You will mentor analysts and collaborate with engineering, IT and risk teams to elevate security posture.

You will apply your deep SIEM/SOAR expertise, scripting skills, and cloud know-how to enhance detection capabilities and incident containment across networks, endpoints and cloud environments.