Job description

About the Department The Finance & Operations department brings insights and intelligence to inform decision making & drives digitalization and business solutions to attain NNI goals. Finance & Operations works closely across the organization to guide enterprise-wide resource allocations, investment choices, drive core operations and develop insights to drive growth and operational excellence across the value chain while innovating for future capabilities. Our focus on innovation ensures we're constantly building future capabilities. We're responsible for regulating accounting, upholding workplace safety, managing our supply chain and sampling, supporting technological and data innovation, maintaining our facilities and assuring the integrity and completeness of all business transactions. At Novo Nordisk, you will have the opportunity to build a career in a global business environment. We encourage our employees to make the most of their talent, and we reward hard work and dedication with opportunities for continuous learning and personal development. Are you ready to maximize your potential with us? The Position In this role you will work within the Detection Analytics & Orchestration function and collaborate with architects, engineers, analysts, and incident responders across the Cyber Defense Center. You will help design, build, and operate advanced detection and response capabilities spanning security analytics, telemetry and observability, SOAR orchestration, automation, and AI-enabled workflows. We are looking for someone who is excited to go beyond out-of-the-box product detections, use the underlying security data creatively, and engineer new analytics and workflows that identify meaningful threats and help responders act quickly. Your work will directly support our goal of improving detection quality while reducing mean time to resolve security incidents. Experience with major platforms for security monitoring, log management, orchestration, AI/ML engineering, and ITSM, such as Microsoft Defender, Sentinel, Splunk, Cribl, ServiceNow, cloud-native logging platforms, data lake technologies, and agentic AI platforms, is an asset for our team. Relationships Reports directly to the Associate Director - Detection Analytics & Orchestration. Will support Cyber Defense Center strategic goals alongside peers in New Jersey, Denmark and India. These relationships include specialists, architects, operations teams, application management teams and project managers. This role will interface routinely with key stakeholders including CDC management, senior security operations personnel, as well as third party technology service providers. Provides guidance and training to less experienced professional or support staff. Essential Functions • Proactively identify opportunities to improve stakeholder satisfaction • Contribute to planning and prioritization of work within the function • Build strong relationships with non-technical stakeholders • Design and engineer detections and analytics that extend beyond standard vendor and product content, using available telemetry to identify threats relevant to our environment • Design and maintain security observability pipelines for endpoint, network, cloud, identity, ap-plication, and infrastructure telemetry • Develop log routing, parsing, enrichment, filtering, normalization, data quality controls, and data tiering strategies that make security data useful and cost-effective • Design, build, and maintain SOAR playbooks and orchestration workflows that automate alert triage, enrichment, containment, escalation, approvals, notifications, and evidence collection • Design, test, and operationalize AI agent workflows and ML-enabled security capabilities for detection, enrichment, investigation, summarization, and analyst productivity • Integrate SIEM, EDR, identity, vulnerability, threat intelligence, ITSM, collaboration, cloud, and data platforms using APIs and supported connectors • Partner with detection engineers and incident responders to identify bottlenecks and engineer measurable improvements that reduce mean time to resolve security incidents • Translate stakeholder and incident response requirements into practical analytics, telemetry, workflow, and automation designs that are reliable, auditable, measurable, and maintainable • Maintain alignment with Incident Response function Physical Requirements 5% overnight travel required. Qualifications • A Bachelor’s degree in Computer Science, Cyber Security, Engineering or other relevant fields. Relevant experience may be substituted when appropriate • 6 years of relevant experience is required • Practical experience with security monitoring, log management, automation, orchestration, cloud security, ITSM, or related technologies such as Microsoft, Splunk, Cribl, ServiceNow, AWS, or Azure is desirable. • Ability to lead or contribute to technical projects involving security processes, platforms, data, automation, or integrations • Familiarity with scripting, query languages, APIs, workflow logic, or data handling concepts is desirable. • Vendor-neutral, vendor-sponsored, or professional certifications in security, cloud, automation, or related technology areas are desirable. • Experience working in an enterprise scale IT operations environment desired • Experience working in a multinational organization • The ability to effectively communicate in a verbal or written context is essential The base compensation range for this position is $99,600 to $184,200. Base compensation is determined based on a number of factors. This position is also eligible for a company bonus based on individual and company performance. Novo Nordisk offers long-term incentive compensation and or company vehicles depending on the position's level or other company factors. Employees are also eligible to participate in Company employee benefit programs including medical, dental and vision coverage; life insurance; disability insurance; 401(k) savings plan; flexible spending accounts; employee assistance program; tuition reimbursement program; and voluntary benefits such as group legal, critical illness, identity theft protection, pet insurance and auto/home insurance. The Company also offers time off pursuant to its sick time policy, flex-able vacation policy and parental leave policy. We commit to an inclusive recruitment process and equality of opportunity for all our job applicants. At Novo Nordisk, we're not chasing quick fixes – we're creating lasting change for long-term health. For over 100 years, we've been driven by a single purpose: to defeat serious chronic diseases and help millions of people live healthier lives. This dedication fuels our constant curiosity and inspires us to push the boundaries of what's possible in healthcare. We embrace diverse perspectives, seek out bold ideas, and build partnerships rooted in shared purpose. Together, we're making healthcare more accessible, treating and defeating diseases, and pioneering solutions that create change spanning generations. When you join us, you become part of something bigger – a legacy of impact that reaches far beyond today. Novo Nordisk is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, protected veteran status or any other characteristic protected by local, state or federal laws, rules or regulations. If you are interested in applying to Novo Nordisk and need special assistance or an accommodation to apply, please call us at 1-855-411-5290. This contact is for accommodation requests only and cannot be used to inquire about the status of applications.

Requirements

Must-haves

Proactively identify opportunities to improve stakeholder satisfaction
Contribute to planning and prioritization of work within the function
Build strong relationships with non-technical stakeholders
Design and engineer detections and analytics that extend beyond standard vendor and product content, using available telemetry to identify threats relevant to our environment
Design and maintain security observability pipelines for endpoint, network, cloud, identity, ap-plication, and infrastructure telemetry
Develop log routing, parsing, enrichment, filtering, normalization, data quality controls, and data tiering strategies that make security data useful and cost-effective
Design, build, and maintain SOAR playbooks and orchestration workflows that automate alert triage, enrichment, containment, escalation, approvals, notifications, and evidence collection
Design, test, and operationalize AI agent workflows and ML-enabled security capabilities for detection, enrichment, investigation, summarization, and analyst productivity
Integrate SIEM, EDR, identity, vulnerability, threat intelligence, ITSM, collaboration, cloud, and data platforms using APIs and supported connectors
Partner with detection engineers and incident responders to identify bottlenecks and engineer measurable improvements that reduce mean time to resolve security incidents
Translate stakeholder and incident response requirements into practical analytics, telemetry, workflow, and automation designs that are reliable, auditable, measurable, and maintainable
Maintain alignment with Incident Response function
Physical Requirements
5% overnight travel required.
A Bachelor’s degree in Computer Science, Cyber Security, Engineering or other relevant fields. Relevant experience may be substituted when appropriate
6 years of relevant experience is required
Practical experience with security monitoring, log management, automation, orchestration, cloud security, ITSM, or related technologies such as Microsoft, Splunk, Cribl, ServiceNow, AWS, or Azure is desirable.
Ability to lead or contribute to technical projects involving security processes, platforms, data, automation, or integrations
Familiarity with scripting, query languages, APIs, workflow logic, or data handling concepts is desirable.
Vendor-neutral, vendor-sponsored, or professional certifications in security, cloud, automation, or related technology areas are desirable.
Experience working in an enterprise scale IT operations environment desired
Experience working in a multinational organization
The ability to effectively communicate in a verbal or written context is essential
We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigomlawsazure

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave