Cloud SIEM & SOAR Security Engineer

Nordnet Bank AB; Stockholms kommun; On-site; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Growth opportunities

Nordic delivery culture

Job summary

Nordnet Bank AB is seeking an IT Security Officer to strengthen our security posture as we rebuild our cloud-first platform. The role focuses on detection engineering, automation, and proactive threat hunting across cloud and on‑prem environments.

You will lead incident response and be part of a global Security Team reporting to the Head of Security. Fluency in English is required; Swedish language skills are an advantage.

Qualifications

• Extensive experience managing enterprise SIEM platforms.
• Proven experience in automation/scripting to build SOAR playbooks.
• Strong understanding of log source management including Windows Event Logs, Linux Syslog, app logs and cloud-native logging (GCP).

Responsibilities

• Detection Engineering: design, develop and maintain advanced detection rules within SIEMs.
• SOAR & Automation: drive automation of security tasks and incident response workflows.
• Continuous Monitoring & Log Governance: ensure high-quality log ingestion and integrity of audit trails across cloud/on-prem environments.
• Incident Response: act as technical lead during security incidents, performing forensic analysis.

Skills

SIEM management

Automation scripting

Log source management

Tools

Splunk

Elastic / SIEM

SOAR platforms

Job description

Nordnet Bank AB is seeking an IT Security Officer to strengthen our security posture as we rebuild our cloud-first platform. The role focuses on detection engineering, automation, and proactive threat hunting across cloud and on‑prem environments.

You will lead incident response and be part of a global Security Team reporting to the Head of Security. Fluency in English is required; Swedish language skills are an advantage.