Are you driven by detecting, investigating and stopping security threats, and do you want to help strengthen how a global company protects its business every day?
Our Security Operations team protects Arla’s systems and data around the clock. In this role, you will take ownership of key parts of our detection and response capabilities, work closely with our security service providers to continuously improve them, and share your expertise with colleagues across IT.
How you will make an impact
You will join IT Security Operations within IT Foundation, where you will take ownership of assigned Security Operations capabilities across endpoint, identity, network, application and cloud environments. Our technology landscape includes Microsoft and Palo Alto security technologies across SIEM, XDR, endpoint and identity.
You will work closely with our managed security service providers, who perform much of the day-to-day security monitoring, investigation and technical execution. Your role is to ensure these services deliver the detection, response and protection capabilities Arla needs.
Your key responsibilities will include:
- Taking ownership of assigned Security Operations capabilities and ensuring they remain effective, relevant and aligned with Arla’s risks and business needs.
- Overseeing security monitoring and investigations performed by our managed security service providers, challenging findings and providing technical direction on complex cases and incidents.
- Coordinating incident response across service providers and internal teams, including containment, eradication, recovery, escalation and follow-up.
- Driving improvements to detection rules, correlation logic, automation workflows and incident-response playbooks, working with our service providers on implementation.
- Assessing vulnerabilities and security-control weaknesses
- Managing the technical quality and performance of our security service providers, setting priorities and ensuring agreed improvements are implemented.
- Providing practical, risk-based security advice and assessments to projects and product teams.
- Leading Security Operations improvement initiatives and sharing security expertise across IT.
What will make you successful
You take ownership and follow issues through to a clear conclusion. When a security incident unfolds, you remain calm, analytical and decisive. You are comfortable working independently, while recognising when collaboration or escalation is needed. The ideal candidate brings:
- A relevant bachelor’s or master’s degree in IT, cybersecurity or a related field, or equivalent professional experience.
- Typically 5+ years of relevant cybersecurity experience, including substantial experience within Security Operations, security monitoring, investigation and incident response.
- Experience taking ownership of complex security investigations, incidents or operational security improvements, including coordinating technical activities across internal teams and external security providers.
- Solid technical knowledge of SIEM, SOAR, EDR, network and identity-security monitoring, and vulnerability management.
- Practical understanding of attacker techniques and security frameworks such as MITRE ATT&CK, NIST and ISO 27001.
- Good understanding of security logging, telemetry, evidence collection and forensic-analysis principles.
- Good understanding of security queries, scripting and automation, enabling you to assess technical solutions, challenge implementation choices and drive improvements with security service providers.
- Experience working with and providing technical direction to managed security service providers, while collaborating effectively with internal technology and product teams.
- A relevant professional security certification, or equivalent demonstrable expertise.
- Experience with technologies such as Microsoft Sentinel, Defender XDR, KQL, Palo Alto or similar enterprise security platforms would be an advantage.
What do we offer?
This position is based in either Aarhus, Denmark or Gdansk, Poland. You will be part of an on-call rotation, approximately every seventh week, to provide support in case of critical issues.
You will join a skilled and collaborative IT Security Operations team with a central role in protecting a global market leader. You will have real ownership of our Security Operations capabilities and the opportunity to lead technical workstreams and improvement initiatives.
Would you like to join us?
If you want to help keep Arla secure and make our Security Operations capabilities even stronger, we would love to hear from you. Please apply as soon as possible, as we review applications on an ongoing basis and may close the recruitment once the right candidate has been found.
For more information, please contact Poul Henrik Tang Jensen, Senior Manager, Head of IT Product Security Operations, at pohtj@arlafoods.com.
