Cyber Security Engineer

Period from: ASAP Period to: [phone] Location: On-site in Stockholm 4 days week Scope: 100 %, full-time Daily tasks: engineer and improve SOC capabilities across Microsoft Sentinel, Defender XDR, security telemetry, detections, integrations and analysts workflows Establish and improve engineering processes for service ownership, lifecycle management, change control, monitoring, documentation, risk tracking and technical roadmaps Lead technical initiatives across cyber Defense Engineering, SOC and dependent platform or application teams Skills: Strong practical experience in SOC or Cyber Defense Engineering Hands-on Microsoft Sentinel and Defender XDR expeerience Experience with SIEM engineering, telemetry onboarding, log pipelines, integrations and detection engineering Experience with SOAR, MSSP integrations and security platform lifecycle management is highly desirable Leadership: Senior technical lead or principal level individual contributor, formal personnel management experience not required but the consultant must have successfully led SOC engineering initiatives and improved engineering processes across multiple teams. The person must be able to assess an immature or unclear operating environment, propose pragmatic structure, drive implementation (not merely product recommendations) Required cloud certification: Azure certifications are beneficial but