Senior IT Security Specialist

Nordea; Stockholms kommun; Híbrido; SEK 900 000 - 1 200 000; Tempo integral

Resumo da oferta

Nordea is seeking an experienced Security Operations Engineer to join the Cyber Security Infrastructure team. This hands-on role focuses on implementing, configuring, operating, and maintaining security platforms to ensure high availability and resilience.

You will work across Nordic and Polish teams to monitor, respond, and improve security tooling, with emphasis on automation, lifecycle management, and cross-system integration in a complex, regulated environment.

Qualificações

• Several years of experience in security operations, infrastructure engineering, or security platform engineering.
• Hands-on experience implementing and operating security tools (e.g. SIEM, SOAR, threat intelligence platforms, logging and monitoring solutions).
• Strong understanding of IT infrastructure, including networks, servers, operating systems, and cloud or hybrid environments.
• Experience with system integrations, APIs, and data pipelines.
• Familiarity with security operations concepts, detection, response, and operational workflows.
• Experience with automation and scripting (Python, PowerShell, Bash).
• Knowledge of identity protection and identity-based threat detection.
• Understanding of cyber security frameworks and models (e.g. MITRE ATT&CK).
• Ability to document solutions and create operational runbooks.
• Fluency in English; knowledge of Nordic languages is an advantage.

Responsabilidades

• As a Security Operations Engineer, you will work with the full lifecycle of security platforms, from design and implementation to daily operations and continuous improvement.
• Implement, configure, and maintain cyber security platforms and tooling.
• Operate and support security systems in a production environment, ensuring availability, performance, and stability.
• Perform upgrades, patching, and lifecycle management of security platforms.
• Integrate security tools with other internal systems, data sources, and workflows.
• Troubleshoot, investigate, and resolve operational issues and incidents related to security systems.
• Automate and improve operational processes to increase efficiency and reliability.
• Collaborate closely with Security Operations, Threat Intelligence, and other stakeholders to ensure tools support operational needs.
• Contribute to documentation, operational procedures, and knowledge sharing.
• Participate in continuous improvement initiatives and onboarding of new security capabilities.

Conhecimentos

Security operations

IT infrastructure

Automation scripting

System integrations

Threat intelligence

English fluency

Ferramentas

SIEM

SOAR

Threat intelligence platforms

Logging and monitoring

APIs

Descrição da oferta de emprego

Job ID: 6543

Welcome to Group Technology, where we engineer solutions that drive Nordea’s transformation by providing a holistic technological view and structured understanding of the bank and its surrounding environment. We enable the Customer Vision and Business Strategy by building and operating secure, stable, and scalable technology platforms.

The Cyber Security Infrastructure team at Nordea is looking for an experienced Security Operations Engineer to strengthen our security platform capability. This role is hands‑on and operational, focused on implementation, configuration, operation, and maintenance of cyber security systems, ensuring high availability, resilience, and continuous improvement across our security tooling landscape.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we'rea tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About Our Team

You will join the Cyber Security Infrastructure / Cyber Defence Centre as part of a Nordic team with members across the Nordics and Poland. The team is responsible for building, running, and improving Nordea’s core cyber security platforms that enable monitoring, detection, response, and intelligence‑driven defence.

Our responsibility spans the end‑to‑end operational ownership of the security platforms, ensuring stable day‑to‑day operations, resilience, and compliance, while continuously improving the service through automation, standardisation, and lifecycle management to ensure that our security systems are robust, well‑integrated, and operationally effective.

Main responsibilities in this role:

• As a Security Operations Engineer, you will work with the full lifecycle of security platforms, from design and implementation to daily operations and continuous improvement
• Implement, configure, and maintain cyber security platforms and tooling
• Operate and support security systems in a production environment, ensuring availability, performance, and stability
• Perform upgrades, patching, and lifecycle management of security platforms
• Integrate security tools with other internal systems, data sources, and workflows
• Troubleshoot, investigate, and resolve operational issues and incidents related to security systems
• Automate and improve operational processes to increase efficiency and reliability
• Collaborate closely with Security Operations, Threat Intelligence, and other stakeholders to ensure tools support operational needs
• Contribute to documentation, operational procedures, and knowledge sharing
• Participate in continuous improvement initiatives and onboarding of new security capabilities

Who You Are

This is the right role for you if you:

• Have a strong sense of responsibility, ethics, and quality in operational environments
• Enjoy hands‑on technical work and problem‑solving
• Thrive in environments where stability, security, and continuous improvement are key
• Work well independently while collaborating effectively in cross‑functional teams
• Are comfortable operating in a complex, regulated, and mission‑critical environment
• Are eager to learn, experiment, and continuously improve security operations

Your background and skills include:

• Several years of experience in security operations, infrastructure engineering, or security platform engineering
• Hands‑on experience implementing and operating security tools (e.g. SIEM, SOAR, threat intelligence platforms, logging and monitoring solutions)
• Strong understanding of IT infrastructure, including networks, servers, operating systems, and cloud or hybrid environments
• Experience with system integrations, APIs, and data pipelines
• Familiarity with security operations concepts, detection, response, and operational workflows
• Experience with automation and scripting (Python, PowerShell, Bash) is an advantage
• Knowledge of identity protection and identity‑based threat detection is an advantage
• Understanding of cyber security frameworks and models (e.g. MITRE ATT&CK) is beneficial
• Ability to document solutions and create operational runbooks
• Fluency in English; knowledge of one or more Nordic languages is an advantage

What We Offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

We reserve the right to reply only to selected applications.