Senior IT Security Specialist Automation

Senior IT Security Specialist Automation

Job

Group Technology – engineering solutions and driving Nordea’s digital transformation by providing a holistic technological view and structured understanding of the bank and its environment.

The role supports Cyber Defence by ensuring accurate and robust cyber security detection posture through automation detection and response processes, and by implementing AI capabilities.

• Design and implement automated detection and response playbooks using SOAR and other security platforms
• Develop intelligent playbooks and automation scripts that enrich incidents with contextual data, perform automated actions, helping to maintain optimal mean time to detect and mean time to response
• Integrate large language models (LLMs) and generative AI into detection and response processes
• Collaborate with monitoring teams and incident response to provide intelligent solutions into detection and response processes

• Analytical mindset, strong problem‑solving abilities to identify security events and patterns
• Attention to detail and methodical approach when developing playbooks
• Strong sense of ownership, proactively driving tasks fully owning responsibilities end‑to‑end
• Technical precision in playbook development to balance detection accuracy with operational efficiency
• Curiosity and adaptability to stay up‑to‑date with evolving threat landscapes and emerging attack techniques

• Bachelor’s degree in Computer Science, Information Security, Cyber Security or related technical field, or equivalent work experience
• 3‑5+ years hands‑on experience with SOAR platforms (Palo Alto xSOAR/xSIAM, Splunk SOAR, Google Chronicle SOAR)
• Strong programming skills in Python and/or Power Shell
• Practical experience with implementing AI/ML models for security use cases
• Proficiency with EDR/XDR platforms and their APIs
• Experience with cloud security (AWS, Azure, GCP) and infrastructure as code

• Experience building autonomous security agents or AI‑driven security solutions
• Background in Dev Sec Ops  and CI/CD security automation
• Advanced certifications such as GCIH, GCFA, GIAC GDAT, CIISP or vendor specific SOAR certifications

• Hybrid working model – flexibility and teamwork
• Diversity and inclusion – inclusive workplace with commitment to continuous improvement
• Growth opportunities within a large Nordic bank, with pathways to advance career and learn from diverse colleagues