Detection Engineer, Mehiläinen

Founded in 1909, Mehiläinen is a rapidly growing healthcare company that strongly invests in the possibilities of digitalisation and innovation. We are on a journey towards an ambitious goal: to be the leading healthcare company in Europe by 2030. Our growth story has already taken us to seven countries, driven by modern technology and the experts who make us a frontrunner in the industry. IT plays a strategic role here — we are a business enabler.

We are looking for an innovative and solution-oriented Detection Engineer to strengthen our Information Security team.

As a Detection Engineer at Mehiläinen, you'll be at the forefront of defending one of most critical digital healthcare ecosystems.

You'll own the detection engineering lifecycle end-to-end: building and tuning detection rules, developing automated response playbooks, and shaping the threat detection capability from the ground up. Your work will be a cornerstone of Mehiläinen's information security foothold, ensuring that as the organization scales its services and data infrastructure, security scales with it.

What you will do You'll join Mehiläinen's information security team as the hands-on expert responsible for keeping our detection and response capabilities sharp and ahead of the threat landscape. Day-to-day, you'll work closely with our operational information security specialists, infrastructure engineers, and cloud teams to ensure visibility across our hybrid environment — translating your co-operation into concrete detection logic and automated workflows. You'll also serve as a key voice in security architecture discussions, helping cross-functional teams build securely.

Key responsibilities: Design, develop, and continuously tune detection rules and correlation logic in the XSIAM, ensuring high-fidelity alerting with minimal noise across Mehiläinen's cloud and on-premises environments

Build and maintain security automation and orchestration playbooks that accelerate incident triage, containment, and response.

Collaborate with SOC, operational information security engineers, DevOps, cloud, infrastructure and application teams to integrate security telemetry from new systems and services, ensuring detection coverage scales alongside Mehiläinen's growing digital footprint

Conduct threat hunting exercises and translate findings into new detections, feeding a continuous improvement loop between hunting, detection engineering, and incident response

✅Requirements

We are looking for someone who brings: 5+ years of professional experience working with relevant information security technology, cyber security or other relevant roles

Strong understanding of detection engineering, automation and day-to-day information/cyber security operations

Up-to-date knowledge of the cyber security threat landscape

Hands-on experience with SIEM platforms (such as Microsoft Sentinel, Splunk, or equivalent)

Proficiency in at least one scripting or programming language (Python, PowerShell, or similar) for building security automation, tooling, and integrations with APIs and SOAR platforms

Experience with cyber security monitoring solutions

Experience applying threat intelligence frameworks such as MITRE ATT&CK to map detection coverage and identify gaps

A relevant higher education degree (e.g. computer science, software engineering, information systems or equivalent); significant practical experience may be considered in lieu of a formal degree

Fluent English; Finnish or another Mehiläinen Group language is an advantage

Personal success factors A growth mindset — you enjoy challenges and embrace opportunities to develop both professionally and personally

A hands-on, can-do attitude — you are not afraid to roll up your sleeves and take ownership

Comfortability making pragmatic decisions under pressure

Strong sense of ownership and accountability for quality and outcomes

Comfort operating in ambiguity and across multiple countries and cultures simultaneously

A collaborative spirit that brings out the best in the people around you

Why join Mehiläinen? We are all committed to acting in line with our values, and we believe the best results come from giving our experts freedom, responsibility, community, and opportunities to grow. We offer the opportunity to work with modern technologies and innovative solutions in a challenging and diverse role, alongside a professional and supportive team. You can choose your own work equipment, enjoy a variety of activities to balance work life, and have the opportunity to work flexibly in a hybrid setup.

📨How to apply

Send your application via the link below by 28th of August. We review applications on a rolling basis and invite selected candidates to interview during the application period. Please note that we do not accept applications by email.

For more information about the role, please contact: Matti Paavola, Head of Information Security Architecture matti.paavola@mehilainen.fi