We're looking for a hands-on, detail-obsessed SecOps Engineer to help us secure our systems from the inside out. This role isn't about watching alerts all day — it's about, learning from incidents, fixing root causes, building smarter defenses, and continuously raising the security maturity bar across our SaaS platform and organization.

You will be working closely with teams such as internal IT, Site reliability engineering and feature development teams to coordinate and enhance day to day security.

We're looking for someone who will challenge old-style security where everything is locked down and nothing is allowed, but rather wants to help implement next-gen security systems with Just-in-Time access, and thinking smart about how we apply security at different layers.

With locations in the heart of Copenhagen, Kolding, Aarhus, and Aalborg, we offer a flexible setup with the possibility to work from one of our locations — or remotely from anywhere in Denmark.

In your day-to-day work, you will help secure our platform by continuously improving our security posture and enabling our developers to build secure software by default.

The below are the areas in which we are working, we dont expect you to excel at all of them, but have the interest to learn and challenge our way of thinking.

Incident Learnings & Implementation:

• Turn security incidents into actionable improvements. Implement the fixes, document the learnings, and improve our posture.

SIEM Management:

• Work with Sumo Logic SIEM, manage ingestion pipelines, maintain dashboards, and ensure the SIEM has the right data sources. together with our security partner for MDR.

Cloud Security & Infrastructure:

• Drive and implement security initiatives in AWS, through infrastructure as code (Terraform)

• Maintain and secure Kubernetes (EKS) clusters together with our SRE teams

• Work with AWS Security Hub and Open Policy Agent (OPA)

Secure Access:

• Collaborate with IT and SRE teams to ensure we have a secure access approach including Zero-trust and Just-In-Time(JIT) access.

Supply Chain Security:

• Help shape our software supply chain policies, such as ensuring coverage of scanning, how we react to supply chain attack vectors and others

Automation & Coding:

• Write and maintain infrastructure-as-code using Terraform

• Script solutions to streamline security workflows and detections

Threat Detection:

• Implement early indicators of compromise such as canary tokens and honeypots.

Secure Development Enablement:

• Review design documentation and facilitate secure-by-design practices. Coordinate with engineering teams to ensure code is reviewed, threat-modeled, and penetration-tested where needed.

Key Objectives

1. Drive Security Enablement & Culture

• Lead security initiatives such as training programs, OWASP learning modules, and workshops around our developers and SDLC

• Help developers understand the importance of security and empower them to build secure software by default

• Embed security practices into our development lifecycle through tooling, education, and collaborative support

2. Build Out SaaS Security Capabilities

• Build and enhance the security capabilities surrounding our SaaS platform, organization, and infrastructure

• Work closely with security partners such as pentesting partners to find and fix issues, and drive continuous improvements

• Coordinate external security assessments and ensure findings are prioritized and remediated

• Develop and maintain security metrics and reporting to track our security maturity over time

Who are you ideally?

You have:

• A proactive mindset towards securing a SaaS environment with focus on incident learning and risk reduction

• Been exposed to AWS and cloud native platforms such as kubernetes from a security perspective.

• Experience with SIEM tools — preferably Sumo Logic — log ingestion, and dashboard creation

• Practical experience with zero trust and JIT access models that fit a growing, fast-moving enterprise.

• Familiarity with software supply chain risks and how to mitigate them

• Ability to write clean, effective code — Terraform and scripting languages preferred

• Experience with developer education and driving security culture change

• Knowledge of OWASP frameworks and secure SDLC practices

• Experience working with external security partners and managing penetration testing programs

Don't meet every single requirement? No worries — this is what we're looking for ideally, but if you're excited about this role and your experience doesn't align perfectly with every qualification but come with a open mindset and are excited about learning new skills, we still encourage you to apply.