Junior Security Operations Analyst

On behalf of a partner company, Nordic Investin is looking for a Junior Security Operations Analyst. You want technical choices, delivery and production behaviour to reinforce each other, even when the constraints are difficult.

The partner is strengthening its capability in disciplined security monitoring investigation and escalation. You will connect SIEM, alert triage and endpoint telemetry while ensuring that case handling and threat frameworks receive appropriate discipline. The aim is practical progress that colleagues can use, leaders can evaluate and the organisation can sustain.

The environment rewards early questions, visible trade-offs and engineering discipline. Security and operability belong in the design.

How you will work

You will work with product, architecture, security, operations and domain colleagues. The partner values short feedback loops, evidence from real systems and direct communication.

This role calls for strong foundations, curiosity and the discipline to learn quickly. You are expected to make trade-offs visible, recognise when a decision needs wider expertise and move work forward without creating unnecessary process.

What you will do

Own the practical direction for disciplined security monitoring investigation and escalation.

Translate goals and constraints into a clear approach for SIEM and alert triage.

Establish useful standards, routines or decision artefacts around endpoint telemetry.

Coordinate stakeholders and dependencies affecting case handling.

Use evidence and measurable outcomes to improve threat frameworks.

Strengthen knowledge sharing and sustainable ownership through scripting.

What you will bring

Relevant experience delivering disciplined security monitoring investigation and escalation in a demanding environment.

Strong working knowledge of SIEM and alert triage.

Practical experience applying endpoint telemetry and case handling.

Ability to assess priorities, risks and trade-offs involving threat frameworks.

Evidence of clear stakeholder communication and dependable end-to-end ownership.

Professional English and the judgement to work with sensitive or business-critical information.

Experience that would add value

Experience from security operations centres and managed security services.

Exposure to scripting in a cross-functional or multi-team environment.

Swedish language skills or experience working across Nordic organisations.

A background that can succeed here

Your background may be product engineering, platform work, enterprise technology or consulting. What matters is technical depth connected to user and business consequences. Direct experience of disciplined security monitoring investigation and escalation is valuable, while adjacent experience counts when it shows transferable judgement.

What makes the opportunity interesting

The role offers meaningful ownership and the opportunity to influence both the solution and the decisions around it. The focus on disciplined security monitoring investigation and escalation gives the opportunity a clear mission and room to influence priorities and success measures.

The exact partner, employment model, compensation, start date and working arrangement will be explained openly during the process. Nordic Investin will make sure you understand the opportunity before asking you to make a decision.

The recruitment conversation

Nordic Investin will focus on decisions you have made: the context, alternatives, result and what you would change today. You will also have room to ask direct questions and test whether the role, mandate and partner environment are right for you.

How to apply

Apply with your CV or LinkedIn profile and a short note about a relevant system, platform or technical change you helped improve. Nordic Investin welcomes different routes into the profession and assesses evidence, judgement and potential alongside formal titles.