Senior Security Specialist: Incident Response and Detection

Systematic; Aarhus; On-site; DKK 900,000 - 1,200,000; Full time

Job summary

Systematic in Aarhus is seeking a Senior Security Specialist to protect critical systems in defence, healthcare and the public sector. You will join a highly skilled GRIT Security team where autonomy, hands-on incident response and threat detection shape everyday work.

You will work across security monitoring, threat detection, incident response and vulnerability management, with the role based in Aarhus though Bucharest is also considered. Fluent English is required.

Qualifications

• 4–6 years’ IT security experience with hands-on security operations and incident response in SOC/CSIRT/CERT.
• Solid understanding of security configurations, monitoring and incident response; hands-on with Microsoft Defender and Azure.
• Comfortable across networking, Windows and Linux; familiarity with MITRE ATT&CK framework.
• Scripting to automate tasks using Python or PowerShell.

Responsibilities

• Investigating and analysing security events escalated by our SOC.
• Investigating, containing and resolving security incidents end to end, and documenting findings and lessons learned.
• Developing and tuning security configurations, detection rules, use cases and response playbooks.
• Carrying out proactive threat hunting and contributing to vulnerability management and compliance work.
• Advising and supporting other teams, sharing security knowledge across the organisation.

Skills

Security operations

Incident response

Microsoft Defender

Azure

Networking

Windows

Linux

MITRE ATT&CK

Python

PowerShell

Tools

Python

PowerShell

Job description

Systematic in Aarhus is seeking a Senior Security Specialist to protect critical systems in defence, healthcare and the public sector. You will join a highly skilled GRIT Security team where autonomy, hands-on incident response and threat detection shape everyday work.

You will work across security monitoring, threat detection, incident response and vulnerability management, with the role based in Aarhus though Bucharest is also considered. Fluent English is required.