Hybrid Security Operations Engineer: Platform & Automation

Nordea; Stockholms kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

Nordea is seeking an experienced Security Operations Engineer to join the Cyber Security Infrastructure team. This hands-on role focuses on implementing, configuring, operating, and maintaining security platforms to ensure high availability and resilience.

You will work across Nordic and Polish teams to monitor, respond, and improve security tooling, with emphasis on automation, lifecycle management, and cross-system integration in a complex, regulated environment.

Qualifications

• Several years of experience in security operations, infrastructure engineering, or security platform engineering.
• Hands-on experience implementing and operating security tools (e.g. SIEM, SOAR, threat intelligence platforms, logging and monitoring solutions).
• Strong understanding of IT infrastructure, including networks, servers, operating systems, and cloud or hybrid environments.
• Experience with system integrations, APIs, and data pipelines.
• Familiarity with security operations concepts, detection, response, and operational workflows.
• Experience with automation and scripting (Python, PowerShell, Bash).
• Knowledge of identity protection and identity-based threat detection.
• Understanding of cyber security frameworks and models (e.g. MITRE ATT&CK).
• Ability to document solutions and create operational runbooks.
• Fluency in English; knowledge of Nordic languages is an advantage.

Responsibilities

• As a Security Operations Engineer, you will work with the full lifecycle of security platforms, from design and implementation to daily operations and continuous improvement.
• Implement, configure, and maintain cyber security platforms and tooling.
• Operate and support security systems in a production environment, ensuring availability, performance, and stability.
• Perform upgrades, patching, and lifecycle management of security platforms.
• Integrate security tools with other internal systems, data sources, and workflows.
• Troubleshoot, investigate, and resolve operational issues and incidents related to security systems.
• Automate and improve operational processes to increase efficiency and reliability.
• Collaborate closely with Security Operations, Threat Intelligence, and other stakeholders to ensure tools support operational needs.
• Contribute to documentation, operational procedures, and knowledge sharing.
• Participate in continuous improvement initiatives and onboarding of new security capabilities.

Skills

Security operations

IT infrastructure

Automation scripting

System integrations

Threat intelligence

English fluency

Tools

SIEM

SOAR

Threat intelligence platforms

Logging and monitoring

APIs

Job description

Nordea is seeking an experienced Security Operations Engineer to join the Cyber Security Infrastructure team. This hands-on role focuses on implementing, configuring, operating, and maintaining security platforms to ensure high availability and resilience.

You will work across Nordic and Polish teams to monitor, respond, and improve security tooling, with emphasis on automation, lifecycle management, and cross-system integration in a complex, regulated environment.