Senior IT Security Specialist Automation

Nordea; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Nordea Group Technology in Warsaw is seeking an experienced Cyber Defence Engineer to design automated detection and response playbooks, and to integrate AI capabilities into security workflows.

You will collaborate with monitoring and incident response teams, implement AI/ML models for security use cases, and work with SOAR platforms and EDR/XDR tooling in a hybrid work environment.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cyber Security or related field.
• 3–5+ years hands-on experience with SOAR platforms (Palo Alto xSOAR/xSIAM, Splunk SOAR, Google Chronicle SOAR).
• Strong programming skills in Python and/or PowerShell.
• Experience with implementing AI/ML models for security use cases.
• Proficiency with EDR/XDR platforms and their APIs.
• Experience with cloud security (AWS, Azure, GCP) and infrastructure as code.

Responsibilities

• Design and implement automated detection and response playbooks using SOAR and other security platforms
• Develop intelligent playbooks and automation scripts that enrich incidents with comprehensive contextual data, perform automated actions helping to maintain optimal mean time to detect and mean time to response
• Integrate large language models (LLMs) and generative AI into detection and response processes
• Collaborate with monitoring teams and incident response to provide intelligent solutions into detection and response processes

Skills

SOAR platforms

Python

PowerShell

AI/ML security

EDR/XDR

Cloud security

Education

Bachelor’s degree in Computer Science, Information Security, Cyber Security or related technical field

Tools

Palo Alto xSOAR/xSIAM

Splunk SOAR

Google Chronicle SOAR

Job description

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About Our Team

Meet the Cyber Defence Centre Engineering team. We add value by improving detection capabilities and automating detection processes. As one of our engineer you’ll play a valuable role in Cyber Defence by ensuring accurate and robust cyber security detection posture through automation detection and response processes and implementation AI capabilities.

Main responsibilities in this role:

• Design and implement automated detection and response playbooks using SOAR and other security platforms
• Develop intelligent playbooks and automation scripts that enrich incidents with comprehensive contextual data, perform automated actions helping to maintain optimal mean time to detect and mean time to response
• Integrate large language models (LLMs) and generative AI into detection and response processes
• Collaborate with monitoring teams and incident response to provide intelligent solutions into detection and response processes

Who You Are

This is the right role for you if:

• Analytical mindset, strong problem solving abilities to identify security events and patterns
• Attention to details and methodical approach when developing playbooks
• Strong sense of ownership, proactively driving tasks fully owning responsibilities end-to-end
• Technical precision in playbook development to balance detection accuracy with operational efficiency
• Curiosity and adaptability to stay up to date with evolving threat landscapes and emerging attack technique

Your background and skills include:

• Bachelor’s degree in Computer Science, Information Security, Cyber Security or related technical field, or equivalent work experience
• 3-5 + years hands‑on experience with SOAR platforms (Palo Alto xSOAR/xSIAM, Splunk SOAR, Google Chronicle SOAR)
• Strong programming skills in Python and/or PowerShell
• Practical experience with implementing AI/ML models for security use cases
• Proficiency with EDR/XDR platforms and their APIs
• Experience with cloud security (AWS, Azure, GCP) and infrastructure as a code

It would be ideal if you also:

• Experience building autonomous security agents or AI-driven security solutions
• Background in DevSecOps and CI/CD security automation
• Advanced certifications such as GCIH, GCFA, GIAC GDAT, CIISP or vendor specific SOAR certifications

What We Offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People

are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture

that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model –

we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion

are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

We enable dreams and aspirations for a greater good.

We build relationships.

We add a personal touch to everything we do – when advising our customers, collaborating with colleagues, and meeting our potential candidates.

We learn and develop.

We take pride in being experts and thinking ahead. We use our expertise to meet our customers’ needs, from the simplest to the most complex. We bring a growth mindset to our work that enables us to focus on a broader perspective in our daily challenges.

We lead change.

We are responsible and aware of the impact of our decisions, both for our customers and for our local and global communities. Mindful of our responsibility towards current and future generations, we have made sustainability an integrated part of our business strategy.

We are Nordea.

We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us. Studies show that members of underrepresented communities don’t apply for jobs unless they tick all the qualification boxes. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

We reserve the right to reply only to selected applications.