Trym Håkansson

Lead, Security Operations @ Crayon

Moss, Viken, Norway

Contact

Summary

As Lead of Security Operations at Crayon, my focus lies in launching and scaling managed detection and response (MDR) services, architecting secure multi-tenant infrastructures, and leading critical incident response efforts. I collaborate with SOC and IT teams to develop and execute KQL detections and conduct advanced threat hunts, all while unifying visibility with Azure and M365 Lighthouse. My background in cloud security, incident response, and threat hunting is supported by my education in information technology from Høgskolen i Østfold and certifications such as Microsoft Certified: Security Operations Analyst Associate. I am driven to enhance security operations through robust processes, proactive threat management, and strategic leadership.

Certifications

Highlighted skills

Experience

Lead, Security Operations — Crayon

September 2025 – Present

  • Spearheaded the launch and scaling of the Managed Detection and Response (MDR) service at Crayon.
  • Architected a secure, multi-tenant infrastructure to enhance service delivery and security.
  • Unified visibility across platforms using Azure & M365 Lighthouse, improving operational efficiency.
  • Led high-stakes incident response efforts in collaboration with SOC and IT teams.

Security Engineer — Crayon

March 2025 – September 2025 (Norway)

  • Delivered advanced incident response and threat hunting across Microsoft Sentinel, Defender XDR, and Defender for Identity in hybrid and cloud environments.
  • Developed KQL-based hunting queries for forensic analysis, effectively identifying and mitigating advanced threats.
  • Built and optimized automation for threat detection, significantly reducing response time and false positives.
  • Collaborated with teams and customers to create reliable security solutions, ensuring consistency across multiple environments.

Cloud Security Consultant — Crayon

October 2023 – March 2025 (Grålum)

  • Developed expertise in incident response using Defender XDR and Microsoft Sentinel to mitigate active threats.
  • Created advanced KQL queries for threat hunting, significantly reducing false positives.
  • Conducted forensic investigations with Microsoft Purview, delivering actionable reports for stakeholders.
  • Deployed phishing-resistant MFA and automated IAM policies with Terraform for enhanced security.

Support Consultant — Crayon

October 2022 – September 2023 (Grålum)

  • Delivered technical support and troubleshooting for Microsoft 365 and Azure, ensuring customer satisfaction.
  • Contributed to improved issue handling and knowledge documentation, enhancing user experience.
  • Collaborated with senior teams to refine support processes and expedite complex escalations.
  • Gained expertise in cloud solutions and customer service best practices.

IT Consultant — Byggfakta Group

January 2022 – October 2022 (Moss kommune, Viken, Norway)

  • Supported and maintained IT hardware/software for internal and external users.
  • Improved documentation and case escalation processes.
  • Ensured high-quality solutions and a strong user experience.

IT Consultant — Viken fylkeskommune

July 2021 – January 2022 (Sarpsborg kommune, Østfold, Norway)

  • Operated, troubleshooted, and supported school and office IT environments.
  • Implemented AV solutions and configured networks for educational purposes.

Information Technology Trainee — Østfold fylkeskommune

August 2017 – August 2019 (Moss kommune, Østfold, Norway)

  • First-line IT support and operations at Malakoff High School.
  • Gained hands-on experience in large-scale IT operations and end-user support.

Education

Høgskolen i Østfold (HiØ) — Informasjonsteknologi (2020–2021)