IT Security Specialist, Security Operations - Aarhus or Gdansk

Arla Foods amba; Aarhus; Presencial; DKK 700.000 - 900.000; Jornada completa

Descripción de la vacante

Arla Foods is seeking aSecurity Operations Lead to own and enhance detection, response and protection capabilities across endpoints, identity, network, cloud and applications. You will work with managed security service providers and internal teams to ensure timely investigations and robust defenses.

You will drive improvements to detection rules, playbooks and automation, while providing practical risk-based security guidance to projects and product teams.

Formación

• A relevant bachelor’s or master’s degree in IT, cybersecurity or a related field, or equivalent professional experience.
• Typically 5+ years of cybersecurity experience in Security Operations, monitoring, investigations or incident response.
• Experience coordinating activities across internal teams and external security providers.
• Solid knowledge of SIEM, SOAR, EDR, network and identity-security monitoring.
• Practical understanding of attacker techniques and frameworks such as MITRE ATT&CK, NIST and ISO 27001.
• Fluent in security logging, telemetry, evidence collection and forensic-analysis principles.

Responsabilidades

• Own assigned Security Operations capabilities across endpoints, identity, network, apps and cloud environments.
• Oversee monitoring and investigations performed by managed security service providers; challenge findings and guide complex cases.
• Coordinate incident response across providers and internal teams from containment to recovery.
• Improve detection rules, correlation logic, automation workflows and playbooks with providers.
• Assess vulnerabilities and security-control weaknesses; drive improvements and priorities across services.
• Provide risk-based security advice to projects and product teams; lead improvement initiatives.

Conocimientos

SIEM

SOAR

EDR

security monitoring

incident response

vulnerability management

MITRE ATT&CK

NIST & ISO 27001

scripting & automation

MS Sentinel / Defender XDR

Educación

Bachelor's or Master's in IT/cybersecurity

Herramientas

Microsoft Sentinel

Defender XDR

KQL

Palo Alto

Descripción del empleo

Are you driven by detecting, investigating and stopping security threats, and do you want to help strengthen how a global company protects its business every day?

“Our Security Operations team protects Arla’s systems and data around the clock. In this role, you will take ownership of key parts of our detection and response capabilities, work closely with our security service providers to continuously improve them, and share your expertise with colleagues across IT,”

How you will make an impact

You will join IT Security Operations within IT Foundation, where you will take ownership of assigned Security Operations capabilities across endpoint, identity, network, application and cloud environments. Our technology landscape includes Microsoft and Palo Alto security technologies across SIEM, XDR, endpoint and identity.

You will work closely with our managed security service providers, who perform much of the day-to-day security monitoring, investigation and technical execution. Your role is to ensure these services deliver the detection, response and protection capabilities Arla needs.

Your key responsibilities will include:

• Taking ownership of assigned Security Operations capabilities and ensuring they remain effective, relevant and aligned with Arla’s risks and business needs.
• Overseeing security monitoring and investigations performed by our managed security service providers, challenging findings and providing technical direction on complex cases and incidents.
• Coordinating incident response across service providers and internal teams, including containment, eradication, recovery, escalation and follow-up.
• Driving improvements to detection rules, correlation logic, automation workflows and incident-response playbooks, working with our service providers on implementation.

• Assessing vulnerabilities and security-control weaknesses

• Managing the technical quality and performance of our security service providers, setting priorities and ensuring agreed improvements are implemented.
• Providing practical, risk-based security advice and assessments to projects and product teams.
• Leading Security Operations improvement initiatives and sharing security expertise across IT.

What will make you successful

You take ownership and follow issues through to a clear conclusion. When a security incident unfolds, you remain calm, analytical and decisive. You are comfortable working independently, while recognising when collaboration or escalation is needed. The ideal candidate brings:

• A relevant bachelor’s or master’s degree in IT, cybersecurity or a related field, or equivalent professional experience.
• Typically 5+ years of relevant cybersecurity experience, including substantial experience within Security Operations, security monitoring, investigation and incident response.
• Experience taking ownership of complex security investigations, incidents or operational security improvements, including coordinating technical activities across internal teams and external security providers.
• Solid technical knowledge of SIEM, SOAR, EDR, network and identity-security monitoring, and vulnerability management.
• Practical understanding of attacker techniques and security frameworks such as MITRE ATT&CK, NIST and ISO 27001.
• Good understanding of security logging, telemetry, evidence collection and forensic-analysis principles.
• Good understanding of security queries, scripting and automation, enabling you to assess technical solutions, challenge implementation choices and drive improvements with security service providers.
• Experience working with and providing technical direction to managed security service providers, while collaborating effectively with internal technology and product teams.
• A relevant professional security certification, or equivalent demonstrable expertise.
• Experience with technologies such as Microsoft Sentinel, Defender XDR, KQL, Palo Alto or similar enterprise security platforms would be an advantage.

What do we offer?

This position is based in either Aarhus, Denmark or Gdansk, Poland. You will be part of an on-call rotation, approximately every seventh week, to provide support in case of critical issues.

You will join a skilled and collaborative IT Security Operations team with a central role in protecting a global market leader. You will have real ownership of our Security Operations capabilities and the opportunity to lead technical workstreams and improvement initiatives.

Would you like to join us?

For more information, please contact Poul Henrik Tang Jensen, Senior Manager, Head of IT Product Security Operations, at [e-mail].

Shape the Future of Dairy

Arla is a global leader in the dairy industry, committed to enabling good food choices that make life better, providing people with nourishment, while taking care at every step to ensure Arla is a choice they can feel good about. If you are looking to shape the future with an ambitious global cooperative that truly cares about your growth, where everyone feels valued and empowered, and collaboration is the core of culture, Arla is a choice you can feel good about.