Cybersecurity operation coordinator

The Cyber Security Operations Coordinator plays a pivotal role in safeguarding the organization's digital assets, systems, and infrastructure. This individual serves as a central point of coordination within the Security Operations Center (SOC), ensuring that cybersecurity processes, incident responses, and compliance activities run smoothly and efficiently. The role bridges technical operations and strategic communication, working closely with analysts, engineers, IT teams, and senior leadership.

Security Operations & Incident Management

• Coordinate day-to-day activities of the Security Operations Center (SOC), including shift handovers, task prioritization, and workload management.

• Oversee the lifecycle of cybersecurity incidents from detection through containment, eradication, and recovery, ensuring timely escalation and resolution.

• Maintain and update incident response playbooks, runbooks, and standard operating procedures (SOPs).

• Serve as the primary liaison between the SOC, IT teams, and business units during active security incidents.

• Monitor security dashboards, SIEM platforms, and threat intelligence feeds for emerging threats and anomalous activity.

Coordination & Communication

• Facilitate communication between technical analysts, management, and external stakeholders during security events.

• Prepare and distribute timely incident reports, status updates, and post-incident reviews (PIRs) to relevant stakeholders.

• Schedule and coordinate tabletop exercises, red team/blue team activities, and disaster recovery drills.

• Maintain a cybersecurity knowledge base, ensuring documentation is current, accurate, and accessible.

Vulnerability & Risk Management

• Coordinate vulnerability assessment schedules, tracking remediation efforts across teams and ensuring SLAs are met.

• Support the risk management process by tracking identified risks, mitigation actions, and control effectiveness.

• Liaise with system owners and asset managers to ensure timely patching and configuration compliance.

Compliance & Governance

• Assist in the preparation for internal and external audits, regulatory assessments, and certification activities (e.g., ISO 27001, NIST, SOC 2).

• Track compliance obligations and control requirements, reporting gaps and remediation progress to the CISO.

• Maintain logs, evidence records, and control documentation required for regulatory and policy compliance.

Metrics & Reporting

• Develop, maintain, and present cybersecurity KPIs and KRIs to leadership on a regular basis.

• Produce weekly, monthly, and quarterly security operations reports, including trend analysis and recommendations.

• Track and manage the SOC ticketing system, ensuring proper categorization, assignment, and closure of security cases.

Education

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Equivalent combination of education and professional experience will be considered.

Experience

• 3–5 years of experience in cybersecurity operations, IT security, or a related discipline.

• Demonstrated experience coordinating incident response activities or working within a SOC environment.

• Experience working with SIEM tools (e.g., Splunk, Microsoft Sentinel, IBM QRadar) and ticketing systems (e.g., ServiceNow, Jira).

• Familiarity with security frameworks such as NIST CSF, MITRE ATT&CK, ISO 27001, or CIS Controls.

Technical Skills

• Proficiency with SIEM, SOAR, EDR, DLP, CTI and vulnerability management platforms.

• Understanding of networking fundamentals, operating systems, and common attack vectors.

• Experience with log analysis, alert triage, and threat hunting methodologies.

• Familiarity with cloud security concepts (AWS, Azure).

Core Competencies

• Excellent organizational and multitasking abilities in a fast-paced, high-pressure environment.

• Strong written and verbal communication skills, including the ability to convey technical concepts to non-technical audiences.

• Analytical thinking and sound judgment in assessing security risks and prioritizing responses.

• High level of integrity, discretion, and professionalism when handling sensitive information.

• Collaborative team player with the ability to coordinate across departments and time zones.

This role may require availability outside of standard business hours, including evenings, weekends, or public holidays, in response to active security incidents or critical operations needs. On-call rotations may apply.

The salary range for this role is €35,000–€40,000 gross per year.

We offer:

• A Truly Global Workplace – collaborate with 40+ nationalities across 25+ countries, embracing diversity, inclusion, and cross-cultural innovation

• Hybrid & Flexible Work – balance your life and career with remote-friendly policies and modern offices across Europe

• A Culture of Growth – accelerate your development with access to LinkedIn Learning, structured mentorship, and internal leadership programmes (HiPo & People Leader tracks)

• Workation Programme – work remotely from abroad for up to 2 months per year and experience new cultures while staying connected and productive

• Financial Growth Opportunities – invest in your future with our share purchase matching programme, doubling your contributions and fostering long-term rewards

• Private Health Insurance – access comprehensive healthcare coverage tailored to local standards

• Wellbeing Benefit – receive an annual wellness allowance to support your physical and mental health

• Weekly Office Breakfast – enjoy a fresh start with breakfast at the office

We may use artificial intelligence (AI) tools to support specific parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses against predefined criteria. These tools assist our recruitment team but do not replace human judgment. All final hiring decisions are made by human recruiters.

By proceeding to apply for a job with us, you confirm that you have read and accepted our Recruitment Privacy Policy