Cyber Security Operations SME

About the role

Wilhelmsen Global Business Services is looking for a Cyber Security Operations SME to strengthen its security operations capabilities. You will work in a hybrid environment across multiple locations, collaborating with IT teams, business units, and external partners to protect critical systems and data.

Key responsibilities

• Lead and deliver Security Operations (SecOps) initiatives.
• Manage security incidents end‑to‑end: detection, analysis, containment, and remediation.
• Conduct advanced investigations, including threat hunting, forensic analysis, and malware analysis.
• Develop and improve detection rules, dashboards, and automation playbooks.
• Work with MSSPs and security vendors to review alerts, escalations, and service quality.
• Optimize and operate security tools and monitoring platforms.
• Translate technical findings into clear business‑relevant risk insights.
• Support audits and regulatory compliance (ISO 27001, NIS2, DORA).
• Participate in security projects, exercises, and continuous‑improvement initiatives.

Required profile

• Degree in IT, Cyber Security or equivalent hands‑on experience.
• Solid experience in security operations, incident response, threat hunting and digital forensics.
• Practical knowledge of penetration testing / ethical hacking and an attacker mindset.
• Familiarity with frameworks such as MITRE ATT&CK, OWASP and PTES.
• Experience working with SOC/MSSP setups and security vendors.
• Strong scripting or automation skills (e.g., Python, PowerShell).

Required skills

• Python
• PowerShell
• MITRE ATT&CK
• OWASP
• PTES
• SOC
• MSSP
• Incident response
• Threat hunting
• Digital forensics
• Penetration testing
• Ethical hacking