Senior Security Operations Engineer

The role

You will lead the engineering of the security operations programme in Stockholm. This hands-on role spans telemetry, detection engineering, incident response, and working with a managed detection and response provider.

What you will do

• Own a risk-prioritised plan for bringing data sources into the SIEM platform.
• Build checks to ensure telemetry is dependable.
• Develop a repeatable detection lifecycle.
• Lead the technical response to security incidents.
• Make containment decisions with the Head of Security and system owners.
• Coordinate security incidents from detection to closure.
• Run practical security incident training and exercises.
• Provide technical evidence to medical device regulation compliance and legal teams.
• Build an effective operating model with the MDR provider and security partners.
• Find practical uses for AI in security operations.

Required qualifications

• Coordinate security incidents across technical and non-technical teams.
• Judge when to gather more evidence, when to contain and when to escalate.
• Work with telemetry from identity, endpoint, cloud, network and application systems.
• Build and operate SIEM integrations, detections and telemetry health checks.
• Use code or automation to remove repetitive work.
• Distinguish expected behavior, control failures and credible malicious activity.
• Write clear playbooks, investigation notes and after-action reviews.
• Explain technical risk to engineers, leaders and colleagues outside security.
• Bring structure to an incomplete process.
• Work collaboratively and stay calm when the answer is not yet clear.
• Make sound decisions with incomplete information and explain reasoning.

Nice to have

• Experience working with a co-managed MDR or managed security service provider.
• Detection engineering experience, including validation and tuning.
• Experience with incident command, security exercises or internal training.
• Experience in healthcare, another regulated environment or a high-growth technology company.
• Experience managing detections, automation or integrations as version-controlled code.
• Experience using AI or machine learning in security operations.

Benefits

• Competitive salary and company stock options.
• Additional compensation for on-call rotations
• 30 days of paid holiday each year.
• 5,000 SEK wellness allowance, plus 6,000 SEK each year for other health-related initiatives.
• Parental leave top-up for new parents.
• Private medical insurance.
• Mental health support through Mindler.
• Pension programme.
• Regular social and team activities, including off-sites and seasonal events.

Before you apply

• Apply with your CV in English.
• Tandem will conduct a background check before hiring.

About the company

Tandem Health is a fast-scaling health-tech company that reimagines healthcare by putting clinicians first. Their platform is designed by clinicians, for clinicians, with intuitive medical notes and workflows.