Lead Security Engineer

RELEX Solutions; Helsingin seutukunta; On-site; EUR 120,000 - 190,000; Full time

Job summary

RELEX Solutions, Helsinki-based, is seeking a Lead Security Engineer to join its in-house cyber defense team. You will lead detection and response across endpoints, cloud services, and supply-chain software, collaborating with a 10–15-strong security group.

You will shape signals engineering using AI/LLM capabilities and mentor peers without formal management duties. You should have hands-on incident response leadership, deep knowledge of Defender and Sentinel, and experience with Wiz CNAPP.

Qualifications

• Hands-on experience in leading security incident response.
• Knowledge of Microsoft Defender and Sentinel capabilities.
• Experience with a CNAPP solution like Wiz.
• Up-to-date knowledge of threats and common TTPs.
• Understanding of how software development works.
• Awareness of AI tools in detection and response.

Responsibilities

• Lead security detection and response across the full cyber estate including endpoints, clouds and SaaS services.
• Drive signals engineering and integrate AI/LLM-driven detection with custom tripwires.
• Develop deep understanding of the cyber estate to prioritize detections where it matters most.
• Hands-on lead during major security incidents when needed, coordinating swift responses.

Skills

Incident response

Defender/Sentinel

Threat intelligence

CNAPP (Wiz)

AI in detection

Mentoring (non-manager)

Tools

Microsoft Defender

Microsoft Sentinel

Wiz CNAPP

Job description

RELEX Solutions helps major retailers and manufacturers optimize their entire supply chain by building software solutions on top of Azure, GCP and our own private data centers.

We’re now looking for a Lead Security Engineer to join our in-house cyber defense team, part of a larger 10-15 person strong security department.

We're looking for someone to:

• Lead our security detection and response capabilities: This covers our entire cyber estate; endpoint devices, clouds, SaaS services (own and third-party) and software supply chains. But you don’t have to do it all alone, you can lean on your team members and our outsourced Security Operations Center when needed.
• Take an active role in signals engineering: LLM log analysis capabilities have changed what was previously feasible and you seek to augment off-the-shelf offerings with custom tripwires. Whether it's sprinkling canary tokens around, spinning up decoys, curating threat intel feeds or something else is entirely up to you.
• Understand our cyber estate better than threat actors: We believe this is a fundamental enabler to be able to build in detection where it matters the most and react fast when things go wrong.
• Take hands-on lead of major security incidents: While automation rules and our SOC should be able to take care of the day-to-day anomalies, you are able to take over when it matters the most.

To succeed in this role, you need to have a broad understanding of how tech works, as well as how companies get breached. We're open to diverse backgrounds but believe an ideal candidate has:

• Hands-on experience in leading security incident response
• Know-how in how to leverage the full set of capabilities offered by Microsoft Defender and Sentinel
• Experience with a CNAPP solution like Wiz
• Up-to-date knowledge of emerging threats and common TTPs
• A solid understanding of how software development works
• A feel for where and how current AI tools are best used in detection and response
• A bias for action and is a self guided problem seeker and solver
• Willingness to coach less experienced team members, although this role does not include people management

While we're on the forefront of using AI in our daily work, we wanted to spend the time to write this job description ourselves. In return we're looking forward to read your application in your own words as well.

Further information about RELEX:

RELEX runs the planning decisions behind 600+ retailers and manufacturers worldwide, deciding, at real scale, what gets forecast, stocked, priced, promoted, and produced across the entire value chain. Few problems combine this much data, this much complexity, and this much real-world weight: get it right and a shelf stays stocked, a factory line doesn’t stall, food doesn’t spoil in a warehouse before it’s sold. Get it wrong, and it shows up in actual losses, for some of the largest retail and manufacturing brands in the world.

We’ve grown for 76 consecutive quarters straight, and it’s still accelerating. The first half of 2026 was the strongest in the company’s history. We’re a team of 2,000+ people, headquartered in Helsinki, with offices across Europe, North America, and Asia-Pacific.

If you have any questions about the role, please reach out to our Talent Acquisition Specialist Rebekka Gotter ([e-mail]).