Praca w miastach:Praca IT Warszawa•Praca IT Kraków•Praca IT Wrocław•Praca IT Szczecin•Praca IT Poznań•Praca IT Lublin•Praca IT Katowice•Praca IT Bydgoszcz•Praca IT Łódź•Praca IT Białystok•Praca IT Toruń•Praca IT Gdańsk
Stanowiska:Grafik komputerowy praca•Tester gier praca•Programista praca•Tester oprogramowania praca•Frontend Developer praca•Data scientist praca•Tester manualny praca•Tester praca•Analytics praca•Tester aplikacji praca•Programista java praca•Web developer praca
Technologie i narzędzia:Python praca•Cyberbezpieczeństwo praca•Java praca•Bazy danych praca•Cisco praca•C++ praca•Javascript praca•SQL praca•Business Intelligence praca•Delphi praca•Wordpress praca•Testowanie aplikacji praca•C# praca•PHP praca
Specjalizacje:Backend praca•Devops praca•Frontend praca•Full-stack praca•GameDev praca•Mobile praca•Embedded praca•Architecture praca•QA/Testing praca•Security praca•AI/ML praca•Big data science praca•Helpdesk praca•IT admin praca•Agile praca•Product Management praca•Project Management praca•UX/UI praca•Business analytics praca•SAP & ERP praca•System analytics praca•PO/PM praca•Scrum master praca•Analityka praca•Data analytics & BI praca
Offer summary
(Summary generated by AI based on the full job description)
The project involves Cyber Defence engineering in a bank, focusing on automating detection and response and embedding AI capabilities. Required stack includes SOAR (Palo Alto xSOAR/xSIAM, Splunk SOAR, Google Chronicle SOAR), Python and/or PowerShell, integrations with EDR/XDR, work with LLM/generative AI and cloud platforms (AWS/Azure/GCP) plus IaC. Responsibilities cover designing and implementing automated playbooks, developing intelligent enrichment and automation scripts, integrating AI into D&R processes, and collaborating with monitoring and incident response teams.
from: 2 November 2026
to: 17 December 2026
salary not specifiedcontract of employment (full-time)
Offer parameters
level:senior
working mode:hybrid
location:Warszawa, Masovian
Warszawa, Masovian
Requirements
Your responsibilities
Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea's transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.
About our team
Meet the Cyber Defence Centre Engineering team. We add value by improving detection capabilities and automating detection processes. As one of our engineer you'll play a valuable role in Cyber Defence by ensuring accurate and robust cyber security detection posture through automation detection and response processes and implementation AI capabilities.
Main responsibilities in this role:
* Design and implement automated detection and response playbooks using SOAR and other security platforms
* Develop intelligent playbooks and automation scripts that enrich incidents with comprehensive contextual data, perform automated actions helping to maintain optimal mean time to detect and mean time to response
* Integrate large language models (LLMs) and generative AI into detection and response processes
* Collaborate with monitoring teams and incident response to provide intelligent solutions into detection and response processes
Who you are
This is the right role for you if you have:
* Analytical mindset, strong problem solving abilities to identify security events and patterns
* Attention to details and methodical approach when developing playbooks
* Strong sense of ownership, proactively driving tasks fully owning responsibilities end-to-end
* Technical precision in playbook development to balance detection accuracy with operational efficiency
* Curiosity and adaptability to stay up to date with evolving threat landscapes and emerging attack technique
Our requirements
Your background and skills include:
* Bachelor's degree in Computer Science, Information Security, Cyber Security or related technical field, or equivalent work experience
* 3-5+ years hands-on experience with SOAR platforms (Palo Alto xSOAR/xSIAM, Splunk SOAR, Google Chronicle SOAR)
* Strong programming skills in Python and/or PowerShell
* Practical experience with implementing AI/ML models for security use cases
* Proficiency with EDR/XDR platforms and their APIs
* Experience with cloud security (AWS, Azure, GCP) and infrastructure as a code
It would be ideal if you also:
* Experience building autonomous security agents or AI-driven security solutions
* Background in DevSecOps and CI/CD security automation
* Advanced certifications such as GCIH, GCFA, GIAC GDAT, CIISP or vendor specific SOAR certifications
If this sounds like you, get in touch!
Benefits
- private medical care
- life insurance
- flexible working time
- integration events
- corporate gym
- corporate sports team
- retirement pension plan
- no dress code
- coffee / tea
- parking space for employees
- leisure zone
- extra social benefits
- holiday funds
- redeployment package
- employee referral program
- charity initiatives
- Sports membership cards
- Nordea Seniority Benefit
- Wellbeing platform
- Hybrid working options
- Flexible benefits platform
NORDEA Bank Abp SA Oddział w Polsce
Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.
Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.
This is how we work
Senior IT Security Specialist Automation
I apply to:
NORDEA Bank Abp SA Oddział w Polsce
Warszawa, Masovian
Pracodawca zbiera zgłoszenia przez swój system.
Przejdziesz na zewnętrzny formularz.
By clicking "Aplikuj" you confirm that you've read and accepted our Terms and Conditions.
This is how the employer processes your data
Please include permit for processing personal data in CV as following:
In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.
The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf
We reserve the right to reply only to selected applications.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Need more information?
- Make sure the body of the offer doesn’t already include what you’re looking for.
- Ask a question if you need more information you’re interested in.
- We’ll forward your question to the employer and aim to provide a response within 3 business days.