Senior IT Security Automation & AI Defender (Hybrid)

Nordea Group; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

Nordea Group seeks a Senior IT Security Specialist Automation to drive automated detection and response capabilities in a hybrid Warsaw-based team. You will design playbooks, enrich incidents with data, and advance AI-driven security detection and response across cloud and on-prem environments.

You will collaborate with Cyber Defence Centre and monitoring/IR teams, applying expertise in SOAR, EDR/XDR, and CI/CD security automation to strengthen the bank’s security posture.

Qualifications

• Bachelor’s degree or equivalent in CS/InfoSec.
• 3–5+ years hands-on with SOAR platforms (Palo Alto xSOAR/xSIAM, Splunk SOAR, Chronicle SOAR).
• Strong programming skills in Python and/or PowerShell.
• Experience implementing AI/ML models for security use cases.
• Proficiency with EDR/XDR platforms and their APIs.
• Experience with cloud security (AWS, Azure, GCP) and IaC.

Responsibilities

• Design and implement automated detection and response playbooks using SOAR and other security platforms.
• Develop intelligent playbooks and automation scripts that enrich incidents with contextual data and automate actions to improve MTTD/MTTR.
• Integrate large language models (LLMs) and generative AI into detection and response processes.
• Collaborate with monitoring and incident response teams to implement intelligent detection and response solutions.

Skills

SOAR platforms

Python

PowerShell

AI/ML for security

EDR/XDR

Cloud security

Infrastructure as code

Education

Bachelor’s degree in Computer Science, Information Security, Cyber Security or related field

Job description

Nordea Group seeks a Senior IT Security Specialist Automation to drive automated detection and response capabilities in a hybrid Warsaw-based team. You will design playbooks, enrich incidents with data, and advance AI-driven security detection and response across cloud and on-prem environments.

You will collaborate with Cyber Defence Centre and monitoring/IR teams, applying expertise in SOAR, EDR/XDR, and CI/CD security automation to strengthen the bank’s security posture.