Security Engineer III

Novo Nordisk A/S; Plainsboro Township, Northern (NJ, KY); Hybrid; USD 100,000 - 184,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k) retirement plan

Life and disability insurance

Job summary

Novo Nordisk A/S in Plainsboro, NJ, is seeking a senior security analytics engineer within the Detection Analytics & Orchestration function. You will design, build, and operate advanced detection, telemetry, SOAR, and AI-enabled workflows to improve detection quality and reduce mean time to resolve incidents.

The role collaborates with architects, engineers, and incident responders across the Cyber Defense Center, leveraging platforms like Microsoft Defender, Sentinel, Splunk, Cribl, and

Qualifications

• Bachelor’s degree in a relevant field or equivalent experience.
• 6 years of relevant experience required.
• Experience with security monitoring, log management, orchestration, or related technologies is desirable.

Responsibilities

• Proactively identify opportunities to improve stakeholder satisfaction.
• Design and engineer detections and analytics beyond standard vendor content.
• Build and maintain SOAR playbooks and orchestration workflows.
• Develop AI-enabled security workflows for detection, enrichment, investigation, and analyst productivity.
• Translate requirements into practical analytics, telemetry, and automation designs.

Skills

Technical leadership

Scripting and APIs

Communication

Project delivery

Education

Bachelor’s degree in Computer Science, Cyber Security, Engineering or related field

Tools

Microsoft

Splunk

Cribl

ServiceNow

AWS

Azure

Job description

Select how often (in days) to receive an alert: Create Alert

The Finance & Operations department brings insights and intelligence to inform decision making & drives digitalization and business solutions to attain NNI goals. Finance & Operations works closely across the organization to guide enterprise-wide resource allocations, investment choices, drive core operations and develop insights to drive growth and operational excellence across the value chain while innovating for future capabilities. Our focus on innovation ensures we're constantly building future capabilities. We're responsible for regulating accounting, upholding workplace safety, managing our supply chain and sampling, supporting technological and data innovation, maintaining our facilities and assuring the integrity and completeness of all business transactions. At Novo Nordisk, you will have the opportunity to build a career in a global business environment. We encourage our employees to make the most of their talent, and we reward hard work and dedication with opportunities for continuous learning and personal development. Are you ready to maximize your potential with us?

The Position

In this role you will work within the Detection Analytics & Orchestration function and collaborate with architects, engineers, analysts, and incident responders across the Cyber Defense Center. You will help design, build, and operate advanced detection and response capabilities spanning security analytics, telemetry and observability, SOAR orchestration, automation, and AI-enabled workflows. We are looking for someone who is excited to go beyond out-of-the-box product detections, use the underlying security data creatively, and engineer new analytics and workflows that identify meaningful threats and help responders act quickly. Your work will directly support our goal of improving detection quality while reducing mean time to resolve security incidents.

Experience with major platforms for security monitoring, log management, orchestration, AI/ML engineering, and ITSM, such as Microsoft Defender, Sentinel, Splunk, Cribl, ServiceNow, cloud-native logging platforms, data lake technologies, and agentic AI platforms, is an asset for our team.

Relationships

Reports directly to the Associate Director - Detection Analytics & Orchestration. Will support Cyber Defense Center strategic goals alongside peers in New Jersey, Denmark and India. These relationships include specialists, architects, operations teams, application management teams and project managers. This role will interface routinely with key stakeholders including CDC management, senior security operations personnel, as well as third party technology service providers. Provides guidance and training to less experienced professional or support staff.

Essential Functions

• Proactively identify opportunities to improve stakeholder satisfaction
• Contribute to planning and prioritization of work within the function
• Build strong relationships with non-technical stakeholders
• Design and engineer detections and analytics that extend beyond standard vendor and product content, using available telemetry to identify threats relevant to our environment
• Design and maintain security observability pipelines for endpoint, network, cloud, identity, ap-plication, and infrastructure telemetry
• Develop log routing, parsing, enrichment, filtering, normalization, data quality controls, and data tiering strategies that make security data useful and cost-effective
• Design, build, and maintain SOAR playbooks and orchestration workflows that automate alert triage, enrichment, containment, escalation, approvals, notifications, and evidence collection
• Design, test, and operationalize AI agent workflows and ML-enabled security capabilities for detection, enrichment, investigation, summarization, and analyst productivity
• Integrate SIEM, EDR, identity, vulnerability, threat intelligence, ITSM, collaboration, cloud, and data platforms using APIs and supported connectors
• Partner with detection engineers and incident responders to identify bottlenecks and engineer measurable improvements that reduce mean time to resolve security incidents
• Translate stakeholder and incident response requirements into practical analytics, telemetry, workflow, and automation designs that are reliable, auditable, measurable, and maintainable
• Maintain alignment with Incident Response function

Physical Requirements

Qualifications

• A Bachelor’s degree in Computer Science, Cyber Security, Engineering or other relevant fields. Relevant experience may be substituted when appropriate
• 6 years of relevant experience is required
• Practical experience with security monitoring, log management, automation, orchestration, cloud security, ITSM, or related technologies such as Microsoft, Splunk, Cribl, ServiceNow, AWS, or Azure is desirable.
• Ability to lead or contribute to technical projects involving security processes, platforms, data, automation, or integrations
• Familiarity with scripting, query languages, APIs, workflow logic, or data handling concepts is desirable.
• Vendor-neutral, vendor-sponsored, or professional certifications in security, cloud, automation, or related technology areas are desirable.
• Experience working in an enterprise scale IT operations environment desired
• Experience working in a multinational organization
• The ability to effectively communicate in a verbal or written context is essential

The base compensation range for this position is $99,600 to $184,200. Base compensation is determined based on a number of factors. This position is also eligible for a company bonus based on individual and company performance. Novo Nordisk offers long-term incentive compensation and or company vehicles depending on the position's level or other company factors.

Employees are also eligible to participate in Company employee benefit programs including medical, dental and vision coverage; life insurance; disability insurance; 401(k) savings plan; flexible spending accounts; employee assistance program; tuition reimbursement program; and voluntary benefits such as group legal, critical illness, identity theft protection, pet insurance and auto/home insurance. The Company also offers time off pursuant to its sick time policy, flex-able vacation policy and parental leave policy.

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.

At Novo Nordisk, we're not chasing quick fixes – we're creating lasting change for long-term health. For over 100 years, we've been driven by a single purpose: to defeat serious chronic diseases and help millions of people live healthier lives. This dedication fuels our constant curiosity and inspires us to push the boundaries of what's possible in healthcare. We embrace diverse perspectives, seek out bold ideas, and build partnerships rooted in shared purpose. Together, we're making healthcare more accessible, treating and defeating diseases, and pioneering solutions that create change spanning generations. When you join us, you become part of something bigger – a legacy of impact that reaches far beyond today.

Novo Nordisk is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, protected veteran status or any other characteristic protected by local, state or federal laws, rules or regulations.