IT Security Officer

Nordnet AB; Stockholms kommun; On-site; SEK 900,000 - 1,100,000; Full time

Benefits offered by this job

Competitive salary

Growth opportunities

Job summary

Nordnet AB is seeking an IT Security Officer to strengthen our security operations as we rebuild on a cloud-first platform. You will develop advanced SIEM detections, automate incident response with SOAR, and drive continuous monitoring and log governance across our global IT landscape.

You will report to the security leadership and collaborate with multi-country teams in a fast-paced Nordic environment focused on delivery and technology. Fluency in English is required; Swedish is an advantage.

Qualifications

• Extensive experience managing enterprise SIEM platforms and writing complex queries.
• Automation/scripting to build SOAR playbooks and streamline security operations.
• Strong understanding of log source management including Windows Event Logs, Linux Syslog, application logs, and cloud-native logging from GCP.

Responsibilities

• Design, develop, and maintain advanced SIEM rules to detect threats across cloud and on-prem environments.
• Lead SOAR automation to reduce MTTR and integrate security tools into a cohesive response fabric.
• Oversee continuous security monitoring and log governance to ensure integrity of audit trails.
• Serve as technical lead during security incidents, conducting forensic analysis and root-cause investigations.

Skills

SIEM expertise

Automation scripting

Cloud logging (GCP)

Job description

Nordnet redefined the financial world as the first digital bank in Europe. Now we are about to do it again and the aim is to create the next generation of bank, in the cloud. We know that this requires great people, great teams, and great technology. Do you want to join us and build the new Nordnet?

In Brief

At Nordnet we want to democratize savings and investments by giving our customers access to the best tools and information whether you are a professional investor or a small saver. With modern technologies and speed of delivery, we are building the next generation investment platform.

This is part of the role

Nordnet is a company with tech as its primary focus, currently rebuilding its entire platform in the cloud to enhance innovation and scalability. As a member of our security team, you will ensure that security is an integrated part of our infrastructure and operations. You will embrace our guiding principles of automation and simplicity, reducing repetitive tasks through orchestration to allow more time for proactive threat hunting and continuous improvement.

As an IT Security Officer, your main responsibilities are related to detection engineering, monitoring, and automation, such as:

• Detection Engineering: Design, develop, and maintain advanced detection rules within our SIEM to identify sophisticated cyber threats and anomalous behavior across cloud and on-premise environments.
• SOAR & Automation: Drive the automation of repetitive security tasks and incident response workflows to reduce Mean Time to Respond (MTTR), integrating our security tools into a cohesive response fabric.
• Continuous Monitoring & Log Governance: Drive the continuous security monitoring of Nordnet’s IT infrastructure by ensuring high-quality log ingestion and the integrity of audit trails. You will be responsible for maintaining the health of log sources and ensuring that security-critical events are correctly aggregated and analyzed to protect Nordnet’s digital assets.
• Incident Response: Serve as a technical lead during security incidents, utilizing SIEM data to conduct forensic analysis and root-cause investigations.

The security team is a central function for all countries that the bank operates in, and you will be reporting directly to the Head of Security at Nordnet. Within the security team there are operational Team Leads. The Team Lead for the IT Security Officers is currently temporarily assigned and you will have the possibility to apply for the permanent Team Lead position if you want to.

As part of our commitment, members of the Security team participate in a rotating on-call schedule. The on-call responsibility is to be the initial point of contact in the event of a critical security incident.

This is you

To succeed in this role, we believe that you take great pride in your work, are curious and continuously want to learn and grow. Believing in collaboration and discussing ideas and concepts with your colleague, you will serve as the first point of contact for our IT Operation organisation.

What you’ll bring to the team:

• Extensive experience managing enterprise SIEM platforms, specifically in writing complex queries and tuning detection logic.
• Proven experience in automation/scripting to build SOAR playbooks and streamline security operations.
• Strong understanding of log source management, including Windows Event Logs, Linux Syslog, Application logs and Cloud-native logging from GCP.

We also require that you speak and write English fluently, Swedish is not mandatory but an advantage.

What we offer

• Your expertise and contribution will be appreciated from day one
• Plenty of opportunities to grow as a security professional
• Competitive salary and compensation

We offer you the opportunity to work in a Nordic environment with a strong focus on delivery, product development and technology. Our ambitions are high and you will embark on a fast and challenging journey together with a skillful team of sharp and committed colleagues. Our teams are autonomous and embrace the agile way of working.

Culture is built and cared for, each day by everyone. We’re proud of ours. Having a flat organization where anyone can talk to anyone creates a warm and friendly atmosphere worth protecting. We believe in a culture where every effort counts and where everyone is being recognized. A culture embracing our core values – passion, simplicity and transparency on all levels, no matter who you are or what you do.

We are over 900 employees located in Stockholm, Oslo, Helsinki, Copenhagen and Frankfurt.

Visit us on: career.nordnetab.com/

If you have questions, please contact Talent Acquisition Partner Lovisa Malmberg at [e-mail]

We want to inform you that Nordnet conducts mandatory credit and background checks, as well as drug testing as a part of our recruitment process.