Skip to main content

This website uses cookies to ensure you get the best experience.

Cyber Instincts AB and our selected partners use cookies and similar technologies (together “cookies”) that are necessary to present this website, and to ensure you get the best experience of it. If you consent to it, we will also use cookies for analytics and marketing purposes.

See our Cookie Policy to read more about the cookies we set.

You can withdraw and manage your consent at any time, by clicking “Manage cookies” at the bottom of each website page.

Select which cookies you accept

On this site, we always set cookies that are strictly necessary, meaning they are necessary for the site to function properly.

If you consent to it, we will also set other types of cookies. You can provide or withdraw your consent to the different types of cookies using the toggles below. You can change or withdraw your consent at any time, by clicking the link “Manage Cookies”, which is always available at the bottom of the site.

To learn more about what the different types of cookies do, how your data is used when they are set etc, see our Cookie Policy.

These cookies are necessary to make the site work properly, and are always set when you visit the site.

Vendors Teamtailor

These cookies collect information to help us understand how the site is being used.

Vendors Teamtailor

These cookies are used to make advertising messages more relevant to you. In some cases, they also deliver additional functions on the site.

Vendors Youtube
Cyber Security · Consultants Malmö, Consultants Stockholm, Consultants Göteborg · Hybrid

Interim Cyber Defence Operations Lead

About the assignment

We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

  • Location: Stockholm, with remote work possible (up to 100%)

  • Start: 26 October 2026 (we are looking to fill this as soon as possible)

  • End: 31 August 2027

  • Scope: Full time (100%)

  • Working language: English

What you'll be doing

  • Leading and coordinating the security operations function (SOC) day to day

  • Owning incident management and threat follow-up from detection to closure

  • Helping lead P1 and major incidents when needed, sometimes outside office hours

  • Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage

  • Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time

  • Coordinating with internal teams and external service providers, acting as the subject matter expert

  • Turning technical findings into clear actions and reporting for managers and stakeholders

What we're looking for

  • A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team

  • Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms

  • Experience with vulnerability management and security monitoring

  • Understanding of modern identity risks, including privileged and non-human identities

  • Strong communication and stakeholder skills, and fluent English

  • A calm, structured and proactive approach under pressure

Nice to have

  • Experience from global or regulated organisations

  • Automation of triage and response

  • Certifications such as GCIH, GCIA or CISSP

Interested? Apply as soon as possible, as we review applications on a rolling basis and the assignment starts shortly.

Department
Cyber Security
Locations
Consultants Malmö, Consultants Stockholm, Consultants Göteborg
Remote status
Hybrid
Cyber Security · Consultants Malmö, Consultants Stockholm, Consultants Göteborg · Hybrid

Interim Cyber Defence Operations Lead

Loading application form