Senior Cyber Defense Operations Engineer

Nordea; Helsinki; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Nordea’s Group Technology Cyber Security Infrastructure team seeks a Security Operations Engineer to strengthen our security platforms. This hands-on role covers design, configuration, operation, and continuous improvement in a production environment across Nordic and Poland teams.

You will implement and maintain security tooling, ensure high availability, and collaborate with Threat Intelligence and cybersecurity stakeholders.

Qualifications

• Several years of experience in security operations, infrastructure engineering, or security platform engineering.
• Hands-on experience implementing and operating security tools (e.g. SIEM, SOAR, threat intelligence platforms, logging and monitoring solutions).
• Strong understanding of IT infrastructure, including networks, servers, operating systems, and cloud or hybrid environments.
• Experience with system integrations, APIs, and data pipelines.
• Familiarity with security operations concepts, detection, response, and operational workflows.
• Experience with automation and scripting (Python, PowerShell, Bash) is an advantage.
• Knowledge of identity protection and identity-based threat detection is an advantage.
• Understanding of cyber security frameworks and models (e.g. MITRE ATT&CK) is beneficial.
• Ability to document solutions and create operational runbooks.
• Fluency in English; knowledge of Nordic languages is an advantage.

Responsibilities

• Work with the full lifecycle of security platforms from design to daily operations and continuous improvement.
• Implement, configure, and maintain cyber security platforms and tooling.
• Operate and support security systems in a production environment ensuring availability.
• Perform upgrades, patching, and lifecycle management of security platforms.
• Integrate security tools with internal systems, data sources, and workflows.
• Troubleshoot, investigate, and resolve operational issues and incidents.
• Automate and improve operational processes for efficiency and reliability.
• Collaborate with Security Operations, Threat Intelligence, and other stakeholders.
• Contribute to documentation, runbooks, and knowledge sharing.
• Participate in continuous improvement and onboarding of new capabilities.

Skills

Security ops

SIEM

SOAR

Threat intel

Logging

IT infra

APIs

Data pipelines

Automation

Python

PowerShell

Bash

MITRE ATT&CK

Runbooks

English

Tools

SIEM

SOAR

Threat intel platforms

Logging & monitoring

Job description

Nordea’s Group Technology Cyber Security Infrastructure team seeks a Security Operations Engineer to strengthen our security platforms. This hands-on role covers design, configuration, operation, and continuous improvement in a production environment across Nordic and Poland teams.

You will implement and maintain security tooling, ensure high availability, and collaborate with Threat Intelligence and cybersecurity stakeholders.