Cybersecurity Analyst Principal

What you will do

At Volvo Group you will contribute to the transformation of our company, the transport industry and society at large. As Principal Cybersecurity Analyst in our Global Cybersecurity Operations Center (CSOC), you will be a senior technical leader, combining expert-level incident response, advanced threat hunting and digital forensics with strategic cybersecurity leadership.

You will work closely with the Head of CSOC to define and refine our global detection, response and intelligence strategy, driving SOC maturity, automation and analytics so that our cyber defense stays ahead of emerging threats. You will act as the highest-level escalation point for complex incidents, lead proactive threat hunting and deep forensic investigations across on-premise, cloud and hybrid environments, and shape intelligence‑driven defenses based on advanced adversary tracking and threat modeling.

In this role, you will partner with cybersecurity engineers, architects and IT teams to enhance our security stack, engineer new detections, and lead SOAR initiatives that turn your expertise into scalable playbooks. You will also mentor analysts across levels, design advanced training and tabletop exercises, and represent the CSOC in executive briefings, communities and selected external forums.

Your future teamYou will join a global, multi-disciplinary CSOC with experienced analysts, threat hunters, engineers and intelligence specialists who work together around the clock to protect Volvo Group’s products, services and operations. The team culture is collaborative, learning-focused and driven by a shared mission to build resilient, intelligence‑led security operations that support Volvo’s long‑term business and sustainability goals.

Who are you?

Do you dream big? We do too, and we are excited to grow together.In this role, you will bring:

• A Bachelor’s or Master’s degree in Cybersecurity, Computer Science or a related field, and around 10+ years of hands‑on cybersecurity experience with deep expertise in SOC operations, incident response and cyber threat intelligence.
• Proven leadership in complex investigations involving APTs, ransomware and large‑scale enterprise incidents, including expert-level digital forensics (memory, network, endpoint) and threat hunting across diverse environments.
• Strong practical experience with modern SIEM, EDR, IDS/IPS, forensic and threat intelligence platforms, including custom detection engineering (for example YARA, Sigma) and scripting in Python, PowerShell or Bash for security automation and SOAR playbooks.
• Deep understanding of cyber threat intelligence and adversary tracking, including nation-state and cybercrime ecosystems, and working knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain, Diamond Model and TIBER‑EU.
• Solid knowledge of cloud and network security (AWS, Azure or GCP), zero‑trust principles and identity‑based threats, combined with the ability to translate technical findings into clear recommendations for executives and business stakeholders.

It is a plus if you also have:

• Relevant advanced certifications such as CISSP, GCIH, GCFA, GCFE, GNFA, OSCP, CCTHP, CTIA or CISM.
• Experience defining SOC strategies, cyber defense roadmaps and risk mitigation frameworks in large or global organizations.
• Background in advanced malware analysis, reverse engineering, purple teaming and cyber resilience stress testing.
• A passion for mentoring others, building inclusive high‑performing teams and contributing to the wider cybersecurity community.

Ready for the next move?

If you want to make a real impact in your career, the transportation business is where you want to be. We look forward to meeting you.