Detection Engineer, Mehiläinen

Mehiläinen; Helsinki; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Flexible work setup

Professional development opportunities

Modern technology and equipment choices

Job summary

Mehiläinen is seeking an innovative Detection Engineer to join its Information Security team in Helsinki, Finland. As a pivotal part of the information security landscape, you'll be responsible for enhancing and tuning detection capabilities across the company's hybrid environments.

Your expertise will directly impact Mehiläinen's security framework, ensuring that as services expand, security remains robust. This is a chance to work with cutting-edge technology and be part of a professional team dedicated to excellence.

Qualifications

• 5+ years of experience in information security technology or related roles.
• Strong understanding of detection engineering and automation.
• Proficiency in at least one scripting or programming language.
• Hands-on experience with cyber security monitoring solutions.

Responsibilities

• Design and tune detection rules for cloud and on-prem environments.
• Build security automation and orchestration playbooks.
• Collaborate with teams to integrate security telemetry.
• Conduct threat hunting and improve detection capabilities.

Skills

Detection engineering

Automation

Information security operations

Scripting (Python, PowerShell)

Cyber security monitoring

Education

Relevant higher education degree (e.g. computer science)

Tools

SIEM platforms (Microsoft Sentinel, Splunk)

Job description

Founded in 1909, Mehiläinen is a rapidly growing healthcare company that strongly invests in the possibilities of digitalisation and innovation. We are on a journey towards an ambitious goal: to be the leading healthcare company in Europe by 2030. Our growth story has already taken us to seven countries, driven by modern technology and the experts who make us a frontrunner in the industry. IT plays a strategic role here — we are a business enabler.

We are looking for an innovative and solution-oriented Detection Engineer to strengthen our Information Security team.

As a Detection Engineer at Mehiläinen, you'll be at the forefront of defending one of most critical digital healthcare ecosystems.

You'll own the detection engineering lifecycle end-to-end: building and tuning detection rules, developing automated response playbooks, and shaping the threat detection capability from the ground up. Your work will be a cornerstone of Mehiläinen's information security foothold, ensuring that as the organization scales its services and data infrastructure, security scales with it.

What you will do

You'll join Mehiläinen's information security team as the hands-on expert responsible for keeping our detection and response capabilities sharp and ahead of the threat landscape. Day-to-day, you'll work closely with our operational information security specialists, infrastructure engineers, and cloud teams to ensure visibility across our hybrid environment — translating your co-operation into concrete detection logic and automated workflows. You'll also serve as a key voice in security architecture discussions, helping cross-functional teams build securely.

Key responsibilities:

• Design, develop, and continuously tune detection rules and correlation logic in the XSIAM, ensuring high-fidelity alerting with minimal noise across Mehiläinen's cloud and on-premises environments
• Build and maintain security automation and orchestration playbooks that accelerate incident triage, containment, and response.
• Collaborate with SOC, operational information security engineers, DevOps, cloud, infrastructure and application teams to integrate security telemetry from new systems and services, ensuring detection coverage scales alongside Mehiläinen's growing digital footprint
• Conduct threat hunting exercises and translate findings into new detections, feeding a continuous improvement loop between hunting, detection engineering, and incident response

Requirements

• 5+ years of professional experience working with relevant information security technology, cyber security or other relevant roles
• Strong understanding of detection engineering, automation and day-to-day information/cyber security operations
• Up-to-date knowledge of the cyber security threat landscape
• Hands-on experience with SIEM platforms (such as Microsoft Sentinel, Splunk, or equivalent)
• Proficiency in at least one scripting or programming language (Python, PowerShell, or similar) for building security automation, tooling, and integrations with APIs and SOAR platforms
• Experience with cyber security monitoring solutions
• Experience applying threat intelligence frameworks such as MITRE ATT&CK to map detection coverage and identify gaps
• A relevant higher education degree (e.g. computer science, software engineering, information systems or equivalent); significant practical experience may be considered in lieu of a formal degree
• Fluent English; Finnish or another Mehiläinen Group language is an advantage

Personal success factors

• A growth mindset — you enjoy challenges and embrace opportunities to develop both professionally and personally
• A hands-on, can-do attitude — you are not afraid to roll up your sleeves and take ownership
• Comfortability making pragmatic decisions under pressure
• Strong sense of ownership and accountability for quality and outcomes
• Comfort operating in ambiguity and across multiple countries and cultures simultaneously
• A collaborative spirit that brings out the best in the people around you

Why join Mehiläinen?

We are all committed to acting in line with our values, and we believe the best results come from giving our experts freedom, responsibility, community, and opportunities to grow. We offer the opportunity to work with modern technologies and innovative solutions in a challenging and diverse role, alongside a professional and supportive team. You can choose your own work equipment, enjoy a variety of activities to balance work life, and have the opportunity to work flexibly in a hybrid setup.

How to apply

Send your application via the link below by 28th of August. We review applications on a rolling basis and invite selected candidates to interview during the application period. Please note that we do not accept applications by email.

For more information about the role, please contact:

Matti Paavola, Head of Information Security Architecture

[e-mail]