Detection Engineer, Mehiläinen

363 Hoivamme Maakunnat Oy; Helsinki; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Flexible work setup

Opportunity for professional growth

Variety of work-life balance activities

Job summary

363 Hoivamme Maakunnat Oy in Helsinki is looking for a skilled cybersecurity expert to enhance their detection capabilities. In this role, you will design and develop detection rules, collaborate across teams, and cultivate automation solutions.

The ideal candidate has over 5 years in cybersecurity and hands-on experience with SIEM tools. Join us for a chance to work with modern technologies, in a supportive environment that values professional growth.

Qualifications

• 5+ years of experience in information security technology or cyber security roles.
• Strong understanding of detection engineering and cyber security operations.
• Hands-on experience with scripting or programming for security automation.

Responsibilities

• Design and tune detection rules and correlation logic for security alerts.
• Build and maintain security automation and orchestration playbooks.
• Collaborate with various teams to integrate security telemetry.

Skills

Detection engineering

Automation

SIEM platforms

Scripting languages (Python, PowerShell)

Cyber security monitoring solutions

Education

Degree in computer science or equivalent

Tools

Microsoft Sentinel

Splunk

Job description

Founded in 1909, Mehiläinen is a rapidly growing healthcare company that strongly invests in the possibilities of digitalisation and innovation. We are on a journey towards an ambitious goal: to be the leading healthcare company in Europe by 2030. Our growth story has already taken us to seven countries, driven by modern technology and the experts who make us a frontrunner in the industry. IT plays a strategic role here — we are a business enabler.

Key Responsibilities

• Design, develop, and continuously tune detection rules and correlation logic in the XSIAM, ensuring high‑fidelity alerting with minimal noise across Mehiläinen's cloud and on‑premises environments.
• Build and maintain security automation and orchestration playbooks that accelerate incident triage, containment, and response.
• Collaborate with SOC, operational information security engineers, DevOps, cloud, infrastructure and application teams to integrate security telemetry from new systems and services, ensuring detection coverage scales alongside Mehiläinen's growing digital footprint.
• Conduct threat hunting exercises and translate findings into new detections, feeding a continuous improvement loop between hunting, detection engineering, and incident response.

Requirements

• 5+ years of professional experience working with relevant information security technology, cyber security or other relevant roles.
• Strong understanding of detection engineering, automation and day‑to‑day information/cyber security operations.
• Up‑to‑date knowledge of the cyber security threat landscape.
• Hands‑on experience with SIEM platforms (such as Microsoft Sentinel, Splunk, or equivalent).
• Proficiency in at least one scripting or programming language (Python, PowerShell, or similar) for building security automation, tooling, and integrations with APIs and SOAR platforms.
• Experience with cyber security monitoring solutions.
• Experience applying threat intelligence frameworks such as MITRE ATT&CK to map detection coverage and identify gaps.
• A relevant higher education degree (e.g. computer science, software engineering, information systems or equivalent); significant practical experience may be considered in lieu of a formal degree.
• Fluent English; Finnish or another Mehiläinen Group language is an advantage.

Personal Success Factors

• A growth mindset — you enjoy challenges and embrace opportunities to develop both professionally and personally.
• A hands‑on, can‑do attitude — you are not afraid to roll up your sleeves and take ownership.
• Comfort making pragmatic decisions under pressure.
• Strong sense of ownership and accountability for quality and outcomes.
• Comfort operating in ambiguity and across multiple countries and cultures simultaneously.
• A collaborative spirit that brings out the best in the people around you.

Why Join Mehiläinen?

We are all committed to acting in line with our values, and we believe the best results come from giving our experts freedom, responsibility, community, and opportunities to grow. We offer the opportunity to work with modern technologies and innovative solutions in a challenging and diverse role, alongside a professional and supportive team. You can choose your own work equipment, enjoy a variety of activities to balance work life, and have the opportunity to work flexibly in a hybrid setup.