Nordic Investin Group
Opens jobs.nordicinvestin.se in a new tab. Check the address before sharing personal information.
Picked out automatically from the employer's ad. Read the full description before applying.
Nordic Investin has been asked to find a Threat Detection Engineer for one of our partner companies. You want technical choices, delivery and production behaviour to reinforce each other, even when the constraints are difficult.
The partner is strengthening its capability in high-quality detection content grounded in realistic attack behaviour. You will connect SIEM engineering, detection rules and telemetry while ensuring that threat mapping and testing receive appropriate discipline. The aim is practical progress that colleagues can use, leaders can evaluate and the organisation can sustain.
The environment rewards early questions, visible trade-offs and engineering discipline. Security and operability belong in the design.
How you will work
You will work with product, architecture, security, operations and domain colleagues. The partner values short feedback loops, evidence from real systems and direct communication.
This role calls for solid delivery experience and the appetite to take broader ownership. You are expected to make trade-offs visible, recognise when a decision needs wider expertise and move work forward without creating unnecessary process.
Own the practical direction for high-quality detection content grounded in realistic attack behaviour.
Translate goals and constraints into a clear approach for SIEM engineering and detection rules.
Establish useful standards, routines or decision artefacts around telemetry.
Coordinate stakeholders and dependencies affecting threat mapping.
Use evidence and measurable outcomes to improve testing.
Strengthen knowledge sharing and sustainable ownership through incident feedback.
What you will bring
Relevant experience delivering high-quality detection content grounded in realistic attack behaviour in a demanding environment.
Strong working knowledge of SIEM engineering and detection rules.
Practical experience applying telemetry and threat mapping.
Ability to assess priorities, risks and trade-offs involving testing.
Evidence of clear stakeholder communication and dependable end-to-end ownership.
Professional English and the judgement to work with sensitive or business-critical information.
Experience that would add value
Experience from enterprise security operations and cloud environments.
Exposure to incident feedback in a cross-functional or multi-team environment.
Swedish language skills or experience working across Nordic organisations.
A background that can succeed here
Your background may be product engineering, platform work, enterprise technology or consulting. What matters is technical depth connected to user and business consequences. Direct experience of high-quality detection content grounded in realistic attack behaviour is valuable, while adjacent experience counts when it shows transferable judgement.
What makes the opportunity interesting
The role offers meaningful ownership and the opportunity to influence both the solution and the decisions around it. The focus on high-quality detection content grounded in realistic attack behaviour gives the opportunity a clear mission and room to influence priorities and success measures.
The exact partner, employment model, compensation, start date and working arrangement will be explained openly during the process. Nordic Investin will make sure you understand the opportunity before asking you to make a decision.
The recruitment conversation
Nordic Investin will focus on decisions you have made: the context, alternatives, result and what you would change today. You will also have room to ask direct questions and test whether the role, mandate and partner environment are right for you.
Apply with your CV or LinkedIn profile and a short note about a relevant system, platform or technical change you helped improve. Nordic Investin welcomes different routes into the profession and assesses evidence, judgement and potential alongside formal titles.
Pay is not stated in the ad.
Explore gross pay after typical payroll taxes for a work location.
Illustrative estimate only; assumes a standard employee profile and may omit benefits, pensions, credits and local rules. Regional and city-specific tax applies only where the selected calculator supports it; other results are country-level. Salary and location are sent only when you calculate: Paysums for supported regions, or WorthOf for wider country coverage. Confirm with an official payroll or tax source before making decisions.
Visa sponsorship and relocation: not stated in the ad.
JobCheckPoint never asks candidates to pay, and genuine employers shouldn't either. If this job asks you for money (registration, training, visa or equipment fees), don't pay. Report it below.
Opens jobs.nordicinvestin.se in a new tab. Check the address before sharing personal information.
Source: Arbetsformedlingen Platsbanken · original listing ↗
Posted today
