Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future? If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match. 

What you will do

As a Cyber Defense Threat Specialist within the Global Cybersecurity Operations Center (CSOC) Analyst you will play a crucial role as a key technical expert responsible for managing and responding to advanced cyber threats, conducting in-depth investigations, and supporting the overall security posture of The Volvo Group. This role combines hands-on technical expertise with leadership and mentoring responsibilities, ensuring effective threat detection, incident response, and continuous improvement of SOC capabilities. The role includes the following responsibility: 

 

Analyze and respond to complex security incidents and alerts generated by SOC tools (e.g., SIEM, EDR, IDS/IPS)    Investigate and resolve escalated incidents from Level 1 and Level 2 analysts, ensuring swift containment and remediation  Lead investigations into cybersecurity incidents, including malware infections, data breaches, and insider threats  Perform digital forensics to collect, analyze, and preserve evidence for legal or compliance requirements  Provide incident reports with detailed root cause analyses and actionable recommendations  Use threat intelligence to identify patterns and indicators of compromise (IOCs) relevant to the organization  Work closely with junior analysts to provide guidance, training, and mentorship, fostering a culture of growth and knowledge-sharing  Collaborate with IT, cybersecurity, and business stakeholder teams to implement and improve security controls  Support the continuous improvement of SOC processes, tools, and technologies to enhance efficiency and effectiveness.  Identify gaps in detection and response capabilities and recommend improvements to SOC leadership. 

 

In this role, you will be responsible for analyzing data, carrying out alert and incident response processes, conducting in-depth analysis of network and endpoint data, and incorporating threat intelligence to enhance detection and mitigation strategies.  The Associate Cybersecurity Analyst will support a team that works the following hours within the Security Operations Center. 

 

Saturday and Sunday 10am-10:30pm

Monday and Tuesday 8am- 4:30pm

Who are you?

Do you dream big? We do too, and we are excited to grow together. In this role, you will bring:  

 

Bachelor’s degree in Computer Science or a related 4-year technical degree   Minimum 7 years of experience in supporting cyber defense operations in highly complex enterprise networks. Experience in SOC, SIRT, or CSIRT capacities   One or more of the following certifications: GIAC Certified Intrusion Analyst, GCIH Certified Incident Handler, GCIA Certified Intrusion Analyst, CISSP   Experience in enterprise cybersecurity environment investigating targeted intrusions through complex network segments   Expert understanding of Advanced Persistent Threat (APT), Cybercrime, and Hacktivist tactics, techniques, and procedures (TTPs)   Subject Matter Expert in cybersecurity principles, threat lifecycle management, incident management   Comprehensive knowledge of various operating systems (Windows, OS X, Linux), network protocols, and application layer protocols   Demonstratable experience in scripting languages (may include Powershell, Python, PERL, etc.)   Understanding of the Cyber Kill Chain methodology, the NIST framework, the MITRE ATT&CK framework, and SANS Critical Security controls   Working knowledge in modern cryptographic algorithms and systems   Experience working with and tuning signatures, rules, signatures, and security technologies (IDS/IPS, SIEM, Sandboxing tools, EDR, email security platforms, user behavior analytics   Network design knowledge including security architecture   Strong analytical and technical skills in network defense operations including experience with incident handling (detection, analysis, triage)   Conceptual understanding of cyber threat hunting   Prior experience and ability analyzing cybersecurity events to determine true positives and false positives. Including cybersecurity alert triage, incident investigation, implementing countermeasures, and managing incident response   Previous experience with SIEM platforms and log aggregation systems that perform collection, analysis, correlation, and alerting   Ability to develop rules, filters, views, signatures, countermeasures, and other cyber defense platforms as well as the ability to support analysis and detection continual improvement   Knowledge of new and emerging cybersecurity technologies   Ability to create technical documents as well as stakeholder sitreps and briefing documents  

  

Preferred Qualifications:  

Deep Cybersecurity Operations Center experience in the following: intelligence driven detection, security principles, threat lifecycle management, incident management, digital forensics and investigations, network monitoring, endpoint monitoring, OT security principles   CSOC Process Management experience, to include: process and procedure management, CSOC initiative management, continual operational improvement   Preferred certifications: CISSP, GCIH, GCIA, Linux+, CCNA, CCNP   Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to both business leaders/key stakeholders as well as technical teams and SMEs   Demonstrated knowledge in cyber defense policies, procedures, and regulations   Knowledge of cyber vulnerability management processes   Knowledge of common user and system authentication and authorization mechanisms    What’s in it for you?

We offer a solid package of compensation and benefits, plus you will enjoy:  

Competitive medical, dental and vision insurance. Generous paid time off including paid caregiver and parental leave policies. Competitive matching retirement savings plans. Working environment where your safety, health and wellbeing come first. Focus on professional and personal development through Volvo Group University. Programs that make today’s challenging reality of combining work and personal life easier. Ready for the next move?

Are you excited to bring your skills and disruptive ideas to the table? We can’t wait to hear from you. Apply today! 
 

 

We value your data privacy and therefore do not accept applications via mail. 

 

Who we are and what we believe in 
Our focus on Inclusion, Diversity, and Equity allows each of us the opportunity to bring our full authentic self to work and thrive by providing a safe and supportive environment, free of harassment and discrimination. We are committed to removing the barriers to entry, which is why we ask that even if you feel you may not meet every qualification on the job description, please apply and let us decide. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

 

 

Applying to this job offers you the opportunity to join Volvo Group. Every day, across the globe, our trucks, buses, engines, construction equipment, financial services, and solutions make modern life possible. We are almost 100,000 people empowered to shape the future landscape of efficient, safe and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents with sharp minds and passion across the group’s leading brands and entities. 

 

Group Digital & IT is the hub for digital development within Volvo Group. Imagine yourself working with cutting-edge technologies in a global team, represented in more than 30 countries. We are dedicated to leading the way of tomorrow’s transport solutions, guided by a strong customer mindset and high level of curiosity, both as individuals and as a team. Here, you will thrive in your career in an environment where your voice is heard and your ideas matter.