Lead Security Engineer: Incident Response & Detection

RELEX Solutions; Helsinki; On-site; EUR 110,000 - 165,000; Full time

Job summary

RELEX Solutions in Helsinki seeks a Lead Security Engineer to join the in-house cyber defense team. You will lead security detection and response across endpoints, clouds, SaaS services, and supply chains, coordinating with the SOC as needed.

You will drive signals engineering, enhancing log analysis with custom tripwires and threat intel feeds, and work to understand our cyber estate better than threat actors to enable fast, effective detection and response.

Qualifications

• Hands-on experience in leading security incident response.
• Know-how to leverage the full set of capabilities offered by Microsoft Defender and Sentinel.
• Experience with a CNAPP solution like Wiz.
• Up-to-date knowledge of emerging threats and common TTPs.
• A solid understanding of how software development works.
• A feel for where and how current AI tools are best used in detection and response.
• A bias for action and is a self guided problem seeker and solver.
• Willingness to coach less experienced team members, although this role does not include people management.

Responsibilities

• Lead our security detection and response capabilities across the cyber estate.
• Take an active role in signals engineering with LLM log analysis capabilities and custom tripwires.
• Understand our cyber estate better than threat actors to enable targeted detection and fast reaction.
• Take hands-on lead of major security incidents when needed.

Skills

IR leadership

Threat detection

Sentinel expertise

CNAPP Wiz

AI in security

Tools

CNAPP Wiz

Microsoft Defender

Sentinel

Job description

RELEX Solutions in Helsinki seeks a Lead Security Engineer to join the in-house cyber defense team. You will lead security detection and response across endpoints, clouds, SaaS services, and supply chains, coordinating with the SOC as needed.

You will drive signals engineering, enhancing log analysis with custom tripwires and threat intel feeds, and work to understand our cyber estate better than threat actors to enable fast, effective detection and response.