Senior Security Operations Lead - Threat Detection & IR

Arla Group; Aarhus; On-site; DKK 700,000 - 900,000; Full time

Job summary

Arla Foods is seeking aSecurity Operations Lead to own and enhance detection, response and protection capabilities across endpoints, identity, network, cloud and applications. You will work with managed security service providers and internal teams to ensure timely investigations and robust defenses.

You will drive improvements to detection rules, playbooks and automation, while providing practical risk-based security guidance to projects and product teams.

Qualifications

• A relevant bachelor’s or master’s degree in IT, cybersecurity or a related field, or equivalent professional experience.
• Typically 5+ years of cybersecurity experience in Security Operations, monitoring, investigations or incident response.
• Experience coordinating activities across internal teams and external security providers.
• Solid knowledge of SIEM, SOAR, EDR, network and identity-security monitoring.
• Practical understanding of attacker techniques and frameworks such as MITRE ATT&CK, NIST and ISO 27001.
• Fluent in security logging, telemetry, evidence collection and forensic-analysis principles.

Responsibilities

• Own assigned Security Operations capabilities across endpoints, identity, network, apps and cloud environments.
• Oversee monitoring and investigations performed by managed security service providers; challenge findings and guide complex cases.
• Coordinate incident response across providers and internal teams from containment to recovery.
• Improve detection rules, correlation logic, automation workflows and playbooks with providers.
• Assess vulnerabilities and security-control weaknesses; drive improvements and priorities across services.
• Provide risk-based security advice to projects and product teams; lead improvement initiatives.

Skills

SIEM

SOAR

EDR

security monitoring

incident response

vulnerability management

MITRE ATT&CK

NIST & ISO 27001

scripting & automation

MS Sentinel / Defender XDR

Education

Bachelor's or Master's in IT/cybersecurity

Tools

Microsoft Sentinel

Defender XDR

KQL

Palo Alto

Job description

Arla Foods is seeking aSecurity Operations Lead to own and enhance detection, response and protection capabilities across endpoints, identity, network, cloud and applications. You will work with managed security service providers and internal teams to ensure timely investigations and robust defenses.

You will drive improvements to detection rules, playbooks and automation, while providing practical risk-based security guidance to projects and product teams.