Senior SOC Engineer: Microsoft Sentinel & Defender XDR

Aqilea; Stockholms kommun; Hybrid; SEK 950,000 - 1,250,000; Full time

Job summary

Aqilea in Stockholm is seeking a Senior Cyber Security Engineer - SOC to join on a 100% assignment from now until March 31, 2027. The role focuses on engineering and strengthening SOC capabilities across Microsoft Sentinel, Defender XDR, and security workflows.

You will lead SOC engineering initiatives, establish processes, and collaborate with cross‑functional teams to drive pragmatic security improvements in a demanding environment with one remote day per week.

Qualifications

• Strong practical experience in SOC or Cyber Defense Engineering.
• Hands-on Microsoft Sentinel and Defender XDR experience.
• Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering.
• Senior technical lead or principal level with proven SOC initiatives.
• Ability to assess immature operating environments and drive implementation.

Responsibilities

• Engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows
• Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps
• Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams

Skills

SOC expertise

Microsoft Sentinel

Defender XDR

SIEM engineering

Telemetry onboarding

Log pipelines

Detection engineering

Technical leadership

Process improvement

Tools

Microsoft Sentinel

Job description

Aqilea in Stockholm is seeking a Senior Cyber Security Engineer - SOC to join on a 100% assignment from now until March 31, 2027. The role focuses on engineering and strengthening SOC capabilities across Microsoft Sentinel, Defender XDR, and security workflows.

You will lead SOC engineering initiatives, establish processes, and collaborate with cross‑functional teams to drive pragmatic security improvements in a demanding environment with one remote day per week.