Security Incident Correlation manager

This is the job
In the role you will be part of the Identity & Security group and your responsibility will be ensuring our systems have the right set-up and are optimized to handle events, activities by using event-logs in the best way possible.
To be successful in the role you need deep knowledge, experience and understanding in all parts of security information and event management (SIEM). You will make sure we analyze and handle the data in our systems in a smart and efficient way and give us a wide view of what is happening in our systems and networks.

Responsibilities include
• Create a strategy/system and processes setup to ensure a consistent method for analyzing event data over the whole company.
• Create a Setup to provide secure storage and archival of event logs.
• Defining and creating smart reporting tools to mine the logs for useful information.
• Be a key part in developing the machine learning capabilities that an advanced Telco needs to analyze a vast number of different events from a multitude of different systems and vendors.
• Ensure the synchronization between different event-logs to be able to detect events of which occur on multiple systems.
• Work together with System owners and assist them in defining best practice and guidelines for their systems.

Requirements
You have good knowledge of security information and event management (SIEM). You also have good knowledge of at least one general scripting language as well as experience in programming, system administration and knowledge of SEM. You have a passion for IT-Security and thrive in a fast environment where your knowledge and expertise is valuable.


You have
• A strong analytical mindset
• Passion for technology and IT, and curious to learn new things
• Experience from larger organization with a flexible environment.
• Strong communication skills, fluently both in Swedish and English.

It is an advantage if you have previously worked with different types of log management systems and have knowledge of some of the products, operating systems and scripting languages listed below:
Tivoli Directory Integrator, Tivoli IAM, Tivoli Directory Server, server side Java Scripting, WebSphere, Active Directory, DB2, Oracle, Windows, Linux.

What Tele2 can give you
Working at Tele2 you will work in a creative and flexible work environment. You will be a part of culture where teamwork and inclusion are leading the way forward. Every employee is important for the company’s success and you will always have an impact of your work. We provide you with the opportunity to grow and develop through internal paths within the organization.

The position is located in our headquarter in Kista, Stockholm.

We want to create an inclusive culture where all forms of diversity are seen. At Tele2, we aim to build an inclusive company in a diverse world and for this position we are happy to see female and international applicants! You are welcome to submit your application as soon as possible! Selection and interviews are conducted continuously.