{"id":669778,"url":"https://alion.io/job/tandemhealth-senior-security-operations-engineer","title":"Senior Security Operations Engineer","company":{"id":685180,"name":"Tandem Health","domain":"tandemhealth.ai","url":"https://alion.io/company/tandemhealth","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":14,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":71,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Stockholm, Sweden"],"countries":["SE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":64000,"max_usd":147000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"EU MDR","optional":false},{"name":"SIEM","optional":false},{"name":"Machine Learning","optional":true}],"status":"live","first_seen_at":"2026-09-03T15:12:44Z","employer_posted_date":"2026-09-03","last_verified_at":"2026-11-04T00:00:48Z","board_verified":true,"closed_at":null,"days_open":61,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":61},"description":"Build something monumental for Healthcare!\nAt Tandem Health we’re reimagining healthcare by putting clinicians first. Our platform - designed by clinicians, for clinicians - is built on deep insight into real-world pain points, with intuitive medical notes and workflows that truly support patient care.\nWe’re a fast-scaling health-tech company backed by top investors and expanding globally. We move fast, stay curious, and believe building something that matters starts with an extraordinary team. If you're passionate about impact and innovation, we'd love to meet you!\nAbout the role\nYou will lead the engineering of our security operations programme in Stockholm. The role is hands-on and spans telemetry, detection engineering, incident response and the way we work with our managed detection and response (MDR) provider.\nThe work is varied. You might trace an identity alert across cloud logs or guide a containment decision during an incident. On another day, you might test whether an AI-assisted investigation workflow is safe enough to use.\nYou will have a real say in the tools we choose, the processes we build and the skills we add as the team grows. The decisions you make will shape how Tandem handles security incidents for years to come.\nThis is a senior individual contributor role today. You do not need to want a management role to grow here. If people management interests you later, we can explore that path as the team grows.\nWhat you will do\nOwn a risk-prioritised plan for bringing data sources into our security information and event management (SIEM) platform.\n\nMake telemetry dependable. Build checks that show when important data is missing, delayed or incomplete.\n\nDevelop a repeatable detection lifecycle that covers creation, testing, tuning, ownership and retirement.\n\nLead the technical response to security incidents. Establish scope, urgency and likely impact, then guide containment and remediation.\n\nMake containment decisions with the Head of Security and relevant system owners. Take direct action when an approved playbook and delegated authority allow it.\n\nCoordinate security incidents from detection to closure. Keep playbooks, decision records, escalation paths and after-action reviews useful and current.\n\nRun practical security incident training and exercises. Help colleagues understand their roles and respond with confidence under pressure.\n\nGive our medical device regulation compliance and legal teams the technical evidence they need to assess potential privacy incidents.\n\nBuild an effective operating model with our MDR provider and other security partners. Make ownership and hand-offs clear.\n\nMeasure what matters, including telemetry coverage, detection quality, response time, hand-off quality and completed follow-up actions.\n\nFind practical uses for AI in security operations. Put clear data boundaries, evaluation, human approval, audit and fallback controls around those workflows.\n\nDocument the systems and decisions you build so future team members can contribute quickly.\n\nWhat success looks like\nIn your first year, your work will allow us to scale out the clear and repeatable process of resolving security incidents from detection to closure. Important telemetry gaps and detection quality should be visible. MDR hand-offs should be seamless, and after-action reviews should lead to delivered improvements.\nYou will also lay the groundwork for the next phase of security operations at Tandem. The next phase needs clearer ownership, more internal capability and systems that a growing team can build on.\nWhat you bring\nCoordinate security incidents across technical and non-technical teams.\n\nJudge when to gather more evidence, when to contain and when to escalate.\n\nWork with telemetry from identity, endpoint, cloud, network and application systems.\n\nBuild and operate SIEM integrations, detections and telemetry health checks.\n\nUse code or automation to remove repetitive work and make response more reliable.\n\nDistinguish expected behavior, control failures and credible malicious activity.\n\nWrite clear playbooks, investigation notes and after-action reviews.\n\nExplain technical risk to engineers, leaders and colleagues outside security.\n\nBring structure to an incomplete process without waiting for perfect conditions.\n\nWork collaboratively and stay calm when the answer is not yet clear.\n\nWe are looking for someone who makes sound decisions with incomplete information and explains their reasoning. You should always improve the system after the immediate problem is over.\nWe care more about demonstrated capability than a particular degree, certification or toolset.\nBonus points\nExperience working with a co-managed MDR or managed security service provider.\n\nDetection engineering experience, including validation and tuning.\n\nExperience with incident command, security exercises or internal training.\n\nExperience in healthcare, another regulated environment or a high-growth technology company.\n\nExperience managing detections, automation or integrations as version-controlled code.\n\nExperience using AI or machine learning in security operations, including ways to assess output quality and failure modes.\n\nOn-call\nOur MDR provider monitors and triages alerts around the clock. You will join a shared after-hours rotation for escalations that need company context or a containment decision. On call rotations include additional compensation.\nLocation\nWe work best when we spend time together. You will work primarily from our headquarters in central Stockholm.\nHow to apply\nWe review applications continuously. Please apply with your CV in English.\nBecause Tandem handles sensitive patient data, we conduct a background check before hiring.\nBenefits\nCompetitive salary and company stock options.\n\nAdditional compensation for on-call rotations\n\n30 days of paid holiday each year.\n\n5,000 SEK wellness allowance, plus 6,000 SEK each year for other health-related initiatives.\n\nParental leave top-up for new parents.\n\nPrivate medical insurance.\n\nMental health support through Mindler.\n\nPension programme.\n\nRegular social and team activities, including off-sites and seasonal events.\n\nWe review our benefits regularly and may change them from time to time.\nCulture at Tandem\nAt Tandem, we move fast, think big, and take ownership. We're a high-performing, diverse team with a shared drive to change the future of healthcare - and we’re just getting started.\nOur culture is built on action, ambition, and learning. You'll be trusted to take the lead, challenge yourself, and make an impact from day one. We believe real growth happens when you're stretched, supported, and surrounded by smart, passionate teammates who want to win together.\nEven though we’re spread across countries, we come together often in Sweden for team meetings, social events, and offsites - blending global reach with real human connection.\nWe hire for talent, potential, and attitude - valuing different backgrounds and fresh perspectives. Great ideas come from everywhere, and we’re building a team that reflects the world we want to change.\nTandem handles sensitive patient data and will conduct a background check before hiring any candidate.","description_format":"text","description_chars":7199,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Parental leave","Stock options"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Medical AI","EHR & Clinical Software"],"lifecycle":[{"event":"open","at":"2026-09-10T22:21:45Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.587,"p_room":0.6,"age_days":60,"expected_fill_days":71,"reasons":["conf:1","stale_co","velocity","win:late","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/tandemhealth-senior-security-operations-engineer","json_url":"https://alion.io/job/tandemhealth-senior-security-operations-engineer.json","meta":{"generated_at":"2026-11-04T04:01:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6200,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685180},"rest":"https://alion.io/mcp/rest/get_company?id=685180"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftandemhealth-senior-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftandemhealth-senior-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftandemhealth-senior-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tandemhealth-senior-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftandemhealth-senior-security-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":669778}},{"tool":"search_jobs","arguments":{"company":"tandemhealth.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":669778},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}