Security Specialist - Cyber Defense Center - Unit IT Prague

Company: Unit IT | Location: Prague

Shape threat detection and response at Unit IT

Would you like to combine hands-on security engineering with the opportunity to shape how threats are detected and addressed? As a Security Specialist at Unit IT in Ballerup, you will help develop the technical capabilities at the heart of our Cyber Defense Center (CDC). Working with Palo Alto’s Cortex XSIAM platform, you will connect security telemetry, refine detection logic, and build integrations and automated response capabilities that make our cyber defense more effective and scalable. Your work will span the full journey from security data to response, combining ongoing technical development with participation in the CDC’s 24/7 shift rotation.

Your role and responsibilities

Reliable security data is the foundation of effective detection. You will integrate and maintain telemetry from endpoints, networks, identity platforms, cloud environments, applications, and third-party security solutions. Within Cortex XSIAM, you will configure and maintain integrations, data ingestion, normalization, dashboards, and security content—helping develop the CDC’s technical capabilities for reliable data ingestion, threat detection, and response.

You will turn that data into actionable detections by developing and refining detection rules, analytics, correlation logic, and behavioral detections. The aim is clear: improve threat identification and reduce false positives. Your XQL queries will support investigations, threat hunting, reporting, operational monitoring, and detection engineering.

Automation will be another key part of your work. You will develop and maintain response playbooks covering enrichment, containment, notification, escalation, and remediation. By connecting XSIAM with security and IT platforms through APIs, automation, and native integrations, you will translate detection capabilities into effective response workflows.

You will also help keep the CDC’s capabilities reliable and its performance visible. This includes developing dashboards, reports, and technical metrics, and troubleshooting issues relating to XSIAM agents, collectors, integrations, data ingestion, automation, and detection content. Clear technical documentation - including runbooks, detection documentation, and platform configuration standards - will support consistent operational practices.

Your qualifications and experience

Your foundation is practical experience with security operations platforms and an understanding of how telemetry supports threat detection and response. You have worked with platform configuration, data ingestion and normalization, and the integration of data from endpoint, network, identity, cloud, and application environments. Experience with Palo Alto’s Cortex XSIAM and XQL is particularly relevant to the work you will do here.

You bring experience developing and refining detection logic and using queries for investigations, threat hunting, and reporting. You are also familiar with security automation, response playbooks, and API-based integrations, including enrichment, containment, escalation, and remediation workflows.

You approach technical troubleshooting systematically and can translate operational requirements into dashboards, reports, and technical metrics. You also maintain clear, accurate technical documentation, runbooks, and configuration standards to support consistent and reliable security operations.

You will participate in the CDC’s 24/7 shift rotation, including shifts outside standard working hours.

Ready to help shape our cyber defense?

If you are motivated by hands-on security engineering and the opportunity to turn technical expertise into effective threat detection and response, we would like to hear from you.

Apply for the Security Specialist role at Unit IT in Prague and tell us how your experience and interests could contribute to the continued development of our Cyber Defense Center.

We look forward to hearing from you.

Ready to apply?

The description above reflects our ideal candidate, but we know that the right person may not tick every box. We place great emphasis on inclusion and diversity and therefore encourage you to apply even if you do not meet all the requirements.

We welcome applications from all qualified candidates regardless of age, gender, religion, sexual orientation, disability, nationality, or ethnic background.

We review applications and CVs on an ongoing basis and reserve the right to close the recruitment process once we have found the right candidate.

If you have any questions about the position, you are very welcome to contact
Chief Delivery Officer Jan Kreuz by phone +45 60373924.

About Unit IT

At Unit IT, you will become part of a family-owned company with a strong culture and a sense of community, where we share knowledge, support one another, and create value together. Our core values,
WE DARE, WE CARE, WE ARE UNITED, are at the heart of how we work and collaborate.

Unit IT has six locations in Denmark, with its headquarters in Middelfart, as well as an office in Prague, Czech Republic. We provide a wide range of advanced IT solutions within infrastructure, private and public cloud, as well as specialist expertise in Cloud, Business Intelligence, Data Platform, and Cyber Security.

Unit IT is part of the Danish, family-owned United Shipping & Trading Company (USTC). USTC’s portfolio includes activities within oil and energy, shipping, door-to-door logistics, risk management, automotive activities, IT, and sustainable energy, with a presence in 38 countries and more than 4,500 employees.