Senior IT Security Officer - Detection & Automation (Cloud)

Nordnet-Bank-Ab; Stockholms kommun; On-site; SEK 900,000 - 1,200,000; Full time

Job summary

Nordnet is rebuilding its cloud-based security infrastructure in Stockholm to support the next generation of digital banking. As IT Security Officer, you will focus on detection engineering, automation, and continuous monitoring to protect Nordnet’s digital assets across cloud and on-prem environments.

You will lead incident response efforts, drive SOAR playbooks, and collaborate with teams to reduce MTTR while maintaining high log integrity. English fluency is essential; Swedish is a plus.

Qualifications

• Extensive experience managing enterprise SIEM platforms, with complex queries and tuned detection logic.
• Experience in automation to build SOAR playbooks and security operations.
• Strong understanding of log sources including Windows Event Logs, Linux Syslog, application logs, and cloud logging (GCP).
• Fluent in English; Swedish is advantageous.

Responsibilities

• Detection Engineering: Design, develop, and maintain advanced detection rules within our SIEM to identify threats across cloud and on-premise environments.
• SOAR & Automation: Drive the automation of repetitive security tasks and incident response workflows to reduce MTTR, integrating tools into a cohesive response fabric.
• Continuous Monitoring & Log Governance: Drive continuous security monitoring by ensuring high-quality log ingestion and the integrity of audit trails across IT infrastructure.
• Incident Response: Serve as technical lead during security incidents, utilizing SIEM data for forensic analysis and root-cause investigations.
• On-call participation: rotate on-call schedule and be the initial point of contact for critical security incidents.

Skills

SIEM proficiency

Automation scripting

Log source management

English fluency

Cloud & on-prem security

Job description

Nordnet is rebuilding its cloud-based security infrastructure in Stockholm to support the next generation of digital banking. As IT Security Officer, you will focus on detection engineering, automation, and continuous monitoring to protect Nordnet’s digital assets across cloud and on-prem environments.

You will lead incident response efforts, drive SOAR playbooks, and collaborate with teams to reduce MTTR while maintaining high log integrity. English fluency is essential; Swedish is a plus.