Security Operations Lead: SIEM, EDR & CSPM (TL IV)

NestAI; Turku; On-site; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Auntie mental wellbeing services

Regular team lunches

Mac or PC choice

Holiday allowance

Phone benefit

Job summary

NestAI in Finland seeks an IT Security Operations Specialist to own security operations within TL IV environments. You will manage threat detection, incident response, and policy enforcement across endpoints, identity, and network domains, reporting to IT Operations.

The role focuses on internal IT security operations; dedicated teams handle product security, DevSecOps, and facility security. Fluent English required; Finnish language is an advantage; security screenings apply.

Qualifications

• 4+ years in IT security operations or SecOps.
• Hands-on with SIEM platforms and vulnerability tools.
• Experience with EDR/EPP and IAM concepts.
• Cloud security and CSPM familiarity.
• English required; Finnish language a plus.

Responsibilities

• Lead SIEM deployment and daily alert triage.
• Coordinate vulnerability management and incident response.
• Manage EPP/EDR and enforce endpoint hardening.
• Oversee network security reviews and access controls.
• Develop IT security policies for TL IV environments.

Skills

SIEM expertise

EDR experience

IAM access control

Cloud security

English fluency

Finnish advantage

Tools

Splunk

Microsoft Sentinel

Elastic

Wazuh

Tenable

Qualys

Rapid7

Job description

NestAI in Finland seeks an IT Security Operations Specialist to own security operations within TL IV environments. You will manage threat detection, incident response, and policy enforcement across endpoints, identity, and network domains, reporting to IT Operations.

The role focuses on internal IT security operations; dedicated teams handle product security, DevSecOps, and facility security. Fluent English required; Finnish language is an advantage; security screenings apply.