Pleo·Denmark, Portugal, Spain, UK·27 авг.
Lead Security Operations Engineer
🌍 УдалённоLeadПолная занятость🌐 Глобал
Вилки нет, про деньги придётся договариваться с нуля.
Наша компания
Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved, not just finance. At Pleo, we're changing that. We build spend solutions that make managing money seamless, empowering, and surprisingly effective for finance teams and employees alike - with a vision to help all businesses ‘go beyond’. The word ‘Pleo’ actually means ‘more than you’d expect’, and living by that mantra has been the secret to our success over the last 10 years. Now, we’re at a pivotal moment in our journey; every move we make has a direct impact on our 40,000+ customers, our business, and our collective success. We need people who take pride in uncovering customer needs, who turn complex problems into simple solutions, challenge the way things are done (respectfully), and always aim high. With great ambitions driving us forward, we can’t say we’ve got this whole thing figured out. And frankly, that’s half the fun! What we can say is that we’re a driven, progressive, and, importantly, a kind bunch of 850+ people from over 100 nationalities, all committed to delivering the future of business spending, together.
О роли
We're looking for a Lead Security Operations Engineer to join our Cybersecurity team at Pleo. In this role, you'll define and deliver the SecOps roadmap, building the detection, response, and investigation capability that protects a fast-growing fintech. If you're excited about owning a security operations function end to end, from framework-based strategy through to the code that makes it run, then this is the opportunity for you!
Чем предстоит заниматься
Who you'll be working with and reporting to
You'll report to our VP of Fraud & Security and work closely with Fraud, DevSecOps, Engineering, and Risk & Compliance. Our team is highly collaborative and dedicated to protecting Pleo's customers and their money. You'll also have the chance to partner with teams across the organisation and to bring less experienced security engineers up with you as the function matures
Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks
Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent
Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise
Strengthen our perimeter and authentication posture, including WAF configuration, authorisation tuning, and monitoring for suspicious traffic
Protect sensitive data through DLP controls, and make sure the coverage matches where the data actually lives
Improve our on-call rotation for the team, defining the alerting, escalation paths, and response SLAs that make it work
Automate detection and response workflows, using code and AI to reduce manual toil and shorten time to resolution
Reduce SecOps-attributed risk identified through compliance gaps, and collect the evidence that demonstrates it
Build dashboards and reporting that give the team and leadership real visibility into response times, coverage, and risk reduction
Work cross-functionally with engineers who don't have a security background, translating threat models into changes they can actually ship
Наши требования
10+ years of experience in security operations, incident response, or a closely related discipline, with a proven track record of materialised risk reduction through monetary impact, incidents contained, forensics that changed outcomes
A strong development and engineering background. You are comfortable writing the automation, not just specifying it
Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design
Experience in scale-up environments, where you've built capability rather than inherited a mature one
A strong understanding of cloud architectures as we use AWS. With part of our estate on GCP and how infrastructure decisions shape detection and response
Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice
Fintech, payments, fraud, or trust & safety experience is a real advantage, as is exposure to highly regulated environments
Backgrounds that tend to do well here: incident response, IR management, SOC engineering, security engineering, DevSecOps, red or blue team
Why is this role a good fit for you
This role is a good fit for you if
You want a large blast radius. We have high-impact projects where the outcome shows up in real business metrics, at a pre-IPO company
You're energised by building a function rather than maintaining one, and you'd rather set the roadmap than be handed it
You enjoy raising the bar around you, growing a team of specialists and lifting the people already here
You're equally at home in a threat model discussion and in an editor writing the automation that acts on it
Дополнительно
You need a well-groomed backlog and assigned tasks in order to do your best work
You'd rather stay purely strategic than get hands-on with the tooling
You're not up for participating in an on-call rotation
How you'll develop in this role
Get deep into Pleo's security landscape and our detection coverage, our logging estate, our cloud footprint to form your own view of where the biggest risks sit
Publish a SecOps roadmap mapped to MITRE, NIST, and CIS, agree with Engineering, Risk & Compliance, and leadership, and start delivering against it
Stand up the on-call rotation and the alert response SLAs that go with it
Ship your first wave of detection and automation improvements, and establish the KPIs that show what changed
We're committed to helping you develop your career, whether that means taking on bigger projects, stepping into leadership, or acquiring new skills. There's genuine room here for the scope of this role to grow, including into people leadership
The location
Please note: We can hire on a remote, hybrid or in-person set-up in any of the locations listed on the advert but you will need to be physically based in the country of your choice with a valid right to work. We are unable to offer visa sponsorship for this role in any of the listed locations
Show me the benefits!
Your own Pleo card (no more out-of-pocket spending!)
Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office
Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis
We offer 25-28 days of holiday (depending on your location) + public holidays
For our Team, we offer both hybrid and fully remote working options
Option to purchase 5 additional days of holiday through a salary sacrifice
We use MyndUp to give our employees access to free mental health and well-being support with great success so far
Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work
The interview process
We want to ensure you are set-up for success and understand what will be expected of you. If your application is successful, our interview process is as follows
Intro call: A 30-minute chat with our Talent Partner to discuss the role and your background
Hiring Manager interview: a 60-minute conversation covering your experience, how you approach security operations, and how you communicate
Technical deep dive: a 60-minute session with two of our SecOps engineers, going deep on SIEM, detection engineering, your coding and automation experience
Cross-functional interview: a 45-minute conversation with DevSecOps and Engineering leadership on how you work across team boundaries with other senior engineers
English first. Since it's our company language, please submit your application in English. You’ll be using it a lot if you join us
A fair look for everyone. Our talent team reads every single application to ensure the process is fair. To keep things running smoothly, we only accept applications through our system—our support team can’t pass on calls or emails
Diversity drives us. We can only reach our goals if our team reflects the world around us. That starts with you hitting apply, even if you don't tick every single box. We encourage people from all backgrounds and experiences to join us
Interview at your best. We want you to feel comfortable throughout the process. If you have any accessibility requirements or need a specific format, email belonging .io. We’ll design a process that works for you
Applying for multiple roles? Nothing is stopping you, and we assess every role independently. However, we do look for alignment, so make sure you can explain why your interest and experience are right for each specific role
Reapplying. If you’re applying for the same role again, please wait six months from your last decision before hitting submit
Технологии и навыки
Pleo
Denmark, Portugal, Spain, UK
ГрейдLead
ЗанятостьПолная занятость
РегионДания, Португалия, Испания, Великобритания
ФорматУдалённо
ИсточникСкрыто
Опубликовано27 авг.
Мы против мошенников на площадке: если тебя просят заплатить, продиктовать код или установить непонятное приложение, прекращай общение и сразу пиши нам (чат с основателем или форма обратной связи).