01
TRCI-26-05211
Interim Cyber Defence Lead (SOC & Incident Response)
Interim Cyber Defence Lead to provide operational leadership and continuity for Cyber Defence while the manager is on parental leave. You will lead and coordinate SOC operations, drive incident management and threat follow-up (including P1/major incidents, potentially outside office hours), and improve MTTR, monitoring/detection coverage, and timely follow-up of incidents, threats, and vulnerabilities. The role requires strong stakeholder communication, the ability to translate technical findings into clear actions and reporting, and hands-on experience with Microsoft XDR, Microsoft Sentinel, and Palo Alto in a cyber defence/SOC environment.
Position summary
- Location
- Sweden
- Workplace
- Remote
- Employment
- Contract
- Experience
- Minimum 5 years and Maximum 10 years
Role overview
Why This Role Matters.
Interim Cyber Defence Lead to provide operational leadership and continuity for Cyber Defence while the manager is on parental leave. You will lead and coordinate SOC operations, drive incident management and threat follow-up (including P1/major incidents, potentially outside office hours), and improve MTTR, monitoring/detection coverage, and timely follow-up of incidents, threats, and vulnerabilities. The role requires strong stakeholder communication, the ability to translate technical findings into clear actions and reporting, and hands-on experience with Microsoft XDR, Microsoft Sentinel, and Palo Alto in a cyber defence/SOC environment.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Lead and coordinate Security Operations (SOC)
03
Drive incident management and threat follow-up
04
Support the team on operational security matters
05
Help lead P1 and major incidents when needed (might be outside office hours)
06
Follow up actions, risks and security improvements
07
Coordinate with internal teams and service providers- act as SME Key priorities
08
Improve MTTR (Mean Time to Respond/Recover)
09
Increase security monitoring and detection coverage
10
Ensure timely follow-up of incidents, threats and vulnerabilities
11
high skills in communication, stakeholder mgmt
12
Strong background in SOC, Incident Response and Cyber Defence
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
SOC
Required
02
Security Operations
Required
03
Incident Response
Required
04
Incident Management
Required
05
Major Incident
Required
06
P1 incident
Required
07
Threat Management
Required
08
Threat Follow-up
Required
09
Security Monitoring
Required
10
Detection Coverage
Required
11
MTTR
Required
12
Vulnerability Management
Required
13
Identity Security
Required
14
Non-human identity
Required
15
Microsoft Sentinel
Required
16
Microsoft XDR
Required
17
Palo Alto
Required
18
Cyber Defence
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
SOC operations leadership and coordination
Incident management and incident response (including P1/major incidents)
Threat management and threat follow-up
Security monitoring and detection engineering/coverage improvement
Vulnerability management and follow-up
Identity security (including modern identity risks)
Stakeholder management and strong communication skills
Ability to translate technical findings into clear actions and reporting
Microsoft Sentinel
Microsoft XDR
Palo Alto (security platform)
Cyber defence operations
Preferred
Nice to Have
Experience coordinating with external service providers (MSSP/partners)
Experience improving MTTR via process/operational metrics and runbooks
Ability to support on-call/out-of-hours major incident leadership
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Interim Cyber Defence Lead (SOC & Incident Response)
One page, about two minutes. We only ask for what we actually need to have a first conversation.