Security Operations Engineer

Job Description

Location: Stockholm or Copenhagen

Are you ready to help build a brand-new security operations practice from the ground up? Do you enjoy designing, automating and hardening technical security capabilities that power Managed Detection & Response and other security services? Join GlobalConnect and play a central role in launching and operating customer-facing security tooling and architecture across cloud-first and hybrid environments.

About The Role And The Team
As a Security Operations Engineer you will be a core member of our newly formed Security Operations team, accountable for designing, developing and maintaining the technical stack that enables our MDR and wider SOC portfolio. You will work closely with engineers, specialists and consultants to create production-ready security-as-code, reusable templates and integrations (SIEM/SOAR/EDR/ITDR/NDR/Email security). You’ll support service delivery by building scalable capabilities, improving automation, and enabling the team to operate and onboard customers efficiently.

The cyber security team will be part of the security services unit responsible for security products and services in GlobalConnects B2B business unit. Our unit has the sole focus of enabling our customers to secure their infrastructure.

Key Responsibilities

• Design, build and maintain security architecture, integrations and automation that underpin our MDR and SOC services.
• Implement and integrate security tooling (SIEM, SOAR, EDR, NDR, ITDR, email security, CSPM/CWPP etc.).
• Build scripts, configuration templates, detection queries and automation runbooks
• Support service delivery by troubleshooting integrations, assisting incident investigations and improving operational playbooks.
• Help define engineering best practices and secure system design

Why you should join GlobalConnect?

Joining GlobalConnect means becoming part of a company that's not just talking about change but actively leading it. You’ll work with a diverse, inclusive team spread across the Nordics, all committed to pushing boundaries and achieving real growth. We offer a hybrid working environment, allowing flexibility in where you work while ensuring you're always connected with your team and clients. Here you will help shape brand-new security services, influence product direction and be part of a team delivering real customer impact from day one.

To succeed in this role, we believe you have:

3+ years of relevant technical cyber security experience, with practical knowledge covering several of the following areas:

• Implementing and configuring MDR technologies and integrations (e.g. SIEM, SOAR, EDR), specifically Microsoft security solutions
• Scripting, query languages (e.g. KQL) and cloud automation for deploying and maintaining security capabilities (e.g. PowerShell/Python, ARM/Bicep).
• Experience with secure system design and software engineering ways of working
• Detection engineering, security monitoring, and security incident response considered a bonus
• Proficient in English and fluent in one Nordic or German language (Swedish, Norwegian or Danish) - able to communicate clearly with customers and colleagues in both written and spoken form.
• Due to the nature of the role, the position requires the ability to obtain and maintain security clearance in accordance with GlobalConnect's policies and applicable laws and regulations.

At GlobalConnect, you’ll have the chance to make a significant impact from day one. If you're ready to take on a role where your contributions will be valued and your success will be celebrated, we’d love to hear from you.

If you’re excited about this opportunity but don’t meet every single requirement, don’t worry! We’d still love to hear from you.

No need for a personal letter – just send us your CV or LinkedIn profile.

Join us, and be part of the transformation. Apply today!