Job Description

Come create the technology that helps the world act together.

Nokia is committed to innovation and technology leadership across mobile, fixed and cloud networks. Your career here will have a positive impact on people’s lives and will help us build the capabilities needed for a more productive, sustainable, and inclusive world.

We challenge ourselves to create an inclusive way of working where we are open to new ideas, empowered to take risks and fearless to bring our authentic selves to work.

The mission of the Technology and AI Organization is to strengthen the company’s capabilities in technology innovation to succeed in the AI Supercycle. The organization is focusing on driving differentiation through Nokia's core technologies, strengthening our capabilities in security and AI, and maximizing the value of partnerships in our ecosystem.

Technology and A I, Group Security (GS) is Nokia’s central knowledge center responsible for Nokia’s cyber security policies and standards, the cyber security architecture and roadmap, and the monitoring, alerting of security incidents.

We partner with the Nokia Business Groups and Central Functions on product security, customer security, and interact with governments on security regulations.

Together we take care of Nokia’s security culture, processes, systems, products and services to position Nokia as a trusted partner for the 5G era and beyond.

The Cyber Security Defense Center (CDC) is looking for a new profile taking up responsibilities in the Operations Team. As the Security Operations Center (SOC) Analyst, you will be tasked with the execution of incident response, investigative analysis of security incidents, reporting, continuous improvement, and post incident activities. You will collaborate with the CDC Engineering Team, with the internal Nokia teams, external Security Suppliers, and various technology vendors.

This role is for a skilled and experienced security professional who will play a critical role in safeguarding Nokia's digital assets.

We are seeking a candidate with a strong understanding of security principles, automation, cloud security, and zero-trust architecture. This individual will be responsible for executing complex security investigations, driving automation and leverage AI initiatives, and collaborating with senior stakeholders to ensure the highest level of security posture.

Detailed responsibilities:

• Execute complex security investigations: Leverage expertise in log analysis, threat intelligence, and incident response to investigate and respond to sophisticated security incidents across all company assets.
• Drive automation and AI-powered security: Collaborate with the SOC Engineer to identify and implement use cases that leverage AI and automation to enhance threat detection, incident response, and security posture.
• Cloud security: Strong understanding of cloud security principles, best practices, and common cloud security threats, zero-trust architecture implementation, and the integration of these principles into Nokia's security operations.
• Collaborate with senior stakeholders: Engage with senior stakeholders across Nokia to communicate security risks, incident response activities, and recommendations for improvement.
• Perform digital forensics and malware analysis to support investigations and root cause analysis
• Build and refine detections and defense strategies based on threat models and attacker behaviours across cloud, identity, endpoint, using frameworks such as MITRE ATT&CK to map adversary tactics and enhance detection coverage
• Contribute to threat hunting initiatives: Lead the development and execution of advanced threat hunting campaigns, leveraging your expertise in security tools and techniques.
• Contribute to the ongoing development of the SOC: Actively participate in initiatives to improve the SOC's processes, technologies, and techniques, ensuring the team remains at the forefront of security innovation

Proven experience in a senior security role: Minimum of 5+ years of experience in a security operations center (SOC) or similar role, with a strong track record of leading and executing complex security investigations.

Incident response and forensics expertise: Deep knowledge of incident response methodologies, forensic analysis techniques, and security incident handling best practices.

Expertise in automation: Demonstrated experience in leveraging automation tools to enhance security operations, including threat detection, incident response, and security posture analysis. AI expertise is considered a plus.

Cloud security: Strong understanding of cloud security principles, best practices, and common cloud security threats. Experience with major cloud platforms (AWS, Azure, GCP) is highly desirable.

Strong analytical and problem-solving skills: Ability to analyze complex security data, identify patterns, and develop effective solutions to security challenges.

Proficiency in forensic analysis, intrusion detection, and threat intelligence.

Advanced knowledge of network analysis, OS internals (Windows/Linux/macOS), and web application security, including the ability to detect abnormal behaviours and assess exploit paths.

Excellent communication and interpersonal skills: Ability to communicate technical information clearly and concisely to both technical and non-technical audiences.

Strong mentoring skills: Ability to lead and mentor junior analysts, fostering a culture of continuous learning and professional development.

Preference for candidates with two or more years of experience working with one or more of the following systems:

• Microsoft Sentinel
• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Identity (MDI)
• SASE

Recommended certifications include:

• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• CompTIA Cybersecurity Analyst (CySA+)
• GIAC Certified Incident Handler (GCIH)
• Microsoft SC-200 (Security Operations Analyst Associate)
• Certified SOC Analyst (CSA) – EC-Council

This is a highly and impactful role within Nokia's security organization. The ideal candidate will be a passionate security professional with a proven track record of success in executing complex security initiatives. If you are looking for a challenging and rewarding opportunity to make a real difference in the security of a global technology leader, we encourage you to apply.

Advancing connectivity to secure a brighter world.

Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we’re advancing connectivity to secure a brighter world.

Learn more about life at Nokia

Our recruitment process

We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect.

If you’re interested in this role but don’t meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity.

The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. Discover more about the recruitment process at Nokia