Security Engineer, Incidents

About the role

Are you a problem-solver who is capable of handling incidents both technical and non-technical? We’d love to hear from you 👀

There are a few things that make our Security team at Wolt quite unique:

• We’re a cross-disciplinary team which makes us strong: looking after not only security but also privacy and physical security and safety
• We work across the whole company and report to the CEO's office, not buried under an organizational silo
• We’re a truly Cloud Native, Zero Trust and DevOps-driven company - so much so that we don’t usually even care about those buzzwords

The Wolt Security team is distributed across many locations in Finland, Sweden and Germany, and we are looking to fill the role in Finland.

What you’ll be doing

• Manage security and privacy events and incidents with a full ownership of handling these from detection to root cause analysis, and potentially reporting them to authorities. This is not a SOC role: you will work as an incident manager and a hands-on responder, Collaborate with our Product Engineering, Operations and IT to implement the necessary immediate fixes, fix vulnerabilities and implement long-term mitigations. Some of the long-term fixes may involve changes to how we do business.
• You’ll also partner with senior leaders across Country operations, Support, product development teams, IT, Legal, and People Ops to balance business continuity, technical risk, and compliance needs - often in situations that require both judgment and initiative.
• This is a senior individual contributor role for someone with solid, hands-on experience in incident management and response. Beyond handling incidents, you’ll drive improvements across our environment - from vulnerability management and threat detection to the security of the SaaS services we rely on. You’ll have significant ownership and the freedom to influence how we strengthen security and privacy across Wolt.
• You’re able to see through complex issues that often have multiple layers - technical, operational, legal, and business-related. You can balance these perspectives, understand how they connect, and help drive decisions that address both immediate risks and long-term impact.

Our humble expectations 

You’ll be successful in this role if you:

• Are a seasoned incident response specialist or security analyst with 5+ years of hands-on experience, ready to take full ownership of diverse, company-wide incidents.
• Enjoy digging into a process – technical or non-technical – to find out why and how something happened.
• Are quick to learn nuances in something.
• Are comfortable with Linux, to the level of essential systems administration on the command line.
• Are comfortable scripting your way through boring stuff, for example, in Python or bash.
• Have a strong work ethic, are organised, and follow things through.
• Communicate clearly and provide good visibility to issues as they progress.
• Skilled at building trust and driving collaboration across diverse teams and stakeholders, ensuring alignment and clear communication during high-impact incidents.
• Are not scared of submitting and reviewing Pull Requests.
• You are not afraid of getting to learn the legal requirements of the GDPR, NIS2, U.S. SEC, DORA, EBA, and the CRA, as they apply to incident reporting.
• And as Wolt’s company language is English, you’d need to be fluent in both spoken and written English.

Next steps

The position will be filled as soon as we find the right person, so make sure to apply as soon as you realize you really want to join us!