Operational Cybersecurity Specialist

VELUX

Operational Cybersecurity Specialist protecting VELUX through hands-on security operations role. Collaboration across teams for threat detection, response, and continuous improvement in a hybrid working environment.

Posted 6/12/2026full-timeHørsholm • 🇩🇰 DenmarkMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Own the end-to-end collaboration with our third-party European SOC, and act as SME
Conducting proactive threat hunting to identify suspicious or malicious activity that may not be detected through standard controls
Supporting incident response activities, including triage, investigation, containment, recovery, and lessons learned
Developing, tuning, and maintaining detections and analytics to improve visibility and reduce false positives
Working with KQL to investigate incidents, support threat hunting, and improve detection logic
Contributing to the development and maturity of our MDR setup based on Microsoft technologies such as Sentinel and Defender
Supporting automation and auto-remediation initiatives to improve response speed and reduce manual effort
Working with detections as code and infrastructure as code principles to help create scalable and repeatable security operations practices
Supporting offensive security activities carried out by third parties, such as penetration tests, red team exercises, and technical assessments
Helping translate findings from incidents and offensive engagements into practical improvements to detections, processes, and operational readiness
Collaborating with teams across cybersecurity, infrastructure, cloud, and applications to strengthen logging, telemetry, and response capabilities

Requirements

What you’ll need

Experience from a role in security operations, SOC, incident response, or a similar hands-on cybersecurity function
Good understanding of threat detection, investigation, and threat hunting in enterprise environments
Experience working with SIEM and EDR/XDR technologies
Practical knowledge of the Microsoft security ecosystem, ideally including Microsoft Sentinel and Microsoft Defender
Experience using KQL for log analysis, investigation, or detection development
Familiarity with attacker techniques and frameworks such as MITRE ATT&CK
Interest in or experience with automation, detections as code, and infrastructure as code
Strong communication and collaboration skills, and the ability to work effectively across technical teams
A structured and calm approach when handling incidents or working under pressure

Benefits

Comp & perks

Support for personal and professional development
Some travel should be expected

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat huntingincident responseKQLdetections as codeinfrastructure as codelog analysisMicrosoft SentinelMicrosoft DefenderSIEMEDR/XDR

Soft Skills

communicationcollaborationstructured approachcalm under pressure