IT Security Operations & Incident Response Specialist

NestAI; Helsinki; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Mental wellbeing services

Regular team lunches

Mac or PC option

Holiday allowance

Phone benefit

Job summary

We seek an IT Security Operations Specialist to own security operations within the IT domain, lead threat detection and incident response, and enforce policies across endpoint, identity, network, and SaaS ecosystems.

Qualifications

• 4+ years in IT security operations or a similar hands-on role.
• Strong knowledge of SIEM platforms and vulnerability tools.
• Hands-on experience with EDR/EPP and IAM concepts.
• Familiarity with cloud security and CSPM; security policy writing.
• Fluent English; Finnish language skills are a plus.
• Certifications (e.g., Security+, GSEC, GCIA, CEH) are advantageous.

Responsibilities

• Lead SIEM implementation, daily alert triage, threat intel, CSPM.
• Own vulnerability scanning, remediation tracking, playbooks.
• Manage EPP/EDR, endpoint hardening, MFA, PAM, RBAC, access recerts.
• Oversee firewall reviews, network segmentation, email security, DLP.
• Handle access controls, logging, and incident procedures in TL IV envs.

Skills

IT security operations

Threat detection

Incident response

IAM (SSO, MFA, RBAC, PAM)

Cloud security

Policy writing

English fluency

Tools

Splunk

Microsoft Sentinel

Elastic

Wazuh

Tenable

Qualys

Rapid7

CrowdStrike

SentinelOne

Microsoft Defender

Azure

AWS

GCP

Job description

We seek an IT Security Operations Specialist to own security operations within the IT domain, lead threat detection and incident response, and enforce policies across endpoint, identity, network, and SaaS ecosystems.