Security Engineer III

The Position

In this role you will work within the Detection Analytics & Orchestration function and collaborate with architects, engineers, analysts, and incident responders across the Cyber Defense Center. You will help design, build, and operate advanced detection and response capabilities spanning security analytics, telemetry and observability, SOAR orchestration, automation, and AI-enabled workflows. We are looking for someone who is excited to go beyond out-of-the-box product detections, use the underlying security data creatively, and engineer new analytics and workflows that identify meaningful threats and help responders act quickly. Your work will directly support our goal of improving detection quality while reducing mean time to resolve security incidents.

Experience with major platforms for security monitoring, log management, orchestration, AI/ML engineering, and ITSM, such as Microsoft Defender, Sentinel, Splunk, Cribl, ServiceNow, cloud-native logging platforms, data lake technologies, and agentic AI platforms, is an asset for our team.

Relationships

Reports directly to the Associate Director - Detection Analytics & Orchestration. Will support Cyber Defense Center strategic goals alongside peers in New Jersey, Denmark and India. These relationships include specialists, architects, operations teams, application management teams and project managers. This role will interface routinely with key stakeholders including CDC management, senior security operations personnel, as well as third party technology service providers. Provides guidance and training to less experienced professional or support staff.

Essential Functions

• Proactively identify opportunities to improve stakeholder satisfaction
• Contribute to planning and prioritization of work within the function
• Build strong relationships with non-technical stakeholders
• Design and engineer detections and analytics that extend beyond standard vendor and product content, using available telemetry to identify threats relevant to our environment
• Design and maintain security observability pipelines for endpoint, network, cloud, identity, ap-plication, and infrastructure telemetry
• Develop log routing, parsing, enrichment, filtering, normalization, data quality controls, and data tiering strategies that make security data useful and cost-effective
• Design, build, and maintain SOAR playbooks and orchestration workflows that automate alert triage, enrichment, containment, escalation, approvals, notifications, and evidence collection
• Design, test, and operationalize AI agent workflows and ML-enabled security capabilities for detection, enrichment, investigation, summarization, and analyst productivity
• Integrate SIEM, EDR, identity, vulnerability, threat intelligence, ITSM, collaboration, cloud, and data platforms using APIs and supported connectors
• Partner with detection engineers and incident responders to identify bottlenecks and engineer measurable improvements that reduce mean time to resolve security incidents
• Translate stakeholder and incident response requirements into practical analytics, telemetry, workflow, and automation designs that are reliable, auditable, measurable, and maintainable
• Maintain alignment with Incident Response function

Physical Requirements

5% overnight travel required.

Qualifications

• A Bachelor's degree in Computer Science, Cyber Security, Engineering or other relevant fields. Relevant experience may be substituted when appropriate
• 6 years of relevant experience is required
• Practical experience with security monitoring, log management, automation, orchestration, cloud security, ITSM, or related technologies such as Microsoft, Splunk, Cribl, ServiceNow, AWS, or Azure is desirable.
• Ability to lead or contribute to technical projects involving security processes, platforms, data, automation, or integrations
• Familiarity with scripting, query languages, APIs, workflow logic, or data handling concepts is desirable.
• Vendor-neutral, vendor-sponsored, or professional certifications in security, cloud, automation, or related technology areas are desirable.
• Experience working in an enterprise scale IT operations environment desired
• Experience working in a multinational organization
• The ability to effectively communicate in a verbal or written context is essential

The base compensation range for this position is $99,600 to $184,200. Base compensation is determined based on a number of factors. This position is also eligible for a company bonus based on individual and company performance. Novo Nordisk offers long-term incentive compensation and or company vehicles depending on the position's level or other company factors.

Employees are also eligible to participate in Company employee benefit programs including medical, dental and vision coverage; life insurance; disability insurance; 401(k) savings plan; flexible spending accounts; employee assistance program; tuition reimbursement program; and voluntary benefits such as group legal, critical illness, identity theft protection, pet insurance and auto/home insurance. The Company also offers time off pursuant to its sick time policy, flex-able vacation policy and parental leave policy.