# Staff Security Operations Engineer **Company**: Pleo **Location**: London **Work arrangement**: hybrid **Experience**: staff **Job type**: full-time **Category**: Security **Industry**: Technology **Apply**: https://jobs.ashbyhq.com/pleo/ec0ccfe9-8f21-404a-afba-079573f9ae89?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_82109f93-789 ## Description We're looking for a Staff Security Operations Engineer to join our Cybersecurity team at Pleo. In this role, you'll define and deliver the SecOps roadmap, building the detection, response, and investigation capability that protects a fast-growing fintech. As a Staff Security Operations Engineer, you will: - Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks. - Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent. - Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise. - Strengthen our perimeter and authentication posture, including WAF configuration, authorisation tuning, and monitoring for suspicious traffic. - Protect sensitive data through DLP controls, and make sure the coverage matches where the data actually lives. - Improve our on-call rotation for the team, defining the alerting, escalation paths, and response SLAs that make it work. - Automate detection and response workflows, using code and AI to reduce manual toil and shorten time to resolution. - Reduce SecOps-attributed risk identified through compliance gaps, and collect the evidence that demonstrates it. - Build dashboards and reporting that give the team and leadership real visibility into response times, coverage, and risk reduction. - Work cross-functionally with engineers who don't have a security background, translating threat models into changes they can actually ship. You'll thrive in this role if you have: - 10+ years of experience in security operations, incident response, or a closely related discipline, with a proven track record of materialised risk reduction through monetary impact, incidents contained, forensics that changed outcomes. - A strong development and engineering background. You are comfortable writing the automation, not just specifying it. - Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design. - Experience in scale-up environments, where you've built capability rather than inherited a mature one. - A strong understanding of cloud architectures as we use AWS. With part of our estate on GCP and how infrastructure decisions shape detection and response. - Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice. - Fintech, payments, fraud, or trust & safety experience is a real advantage, as is exposure to highly regulated environments. We offer a range of benefits, including: - Your own Pleo card (no more out-of-pocket spending!) - Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office - Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis - We offer 25-28 days of holiday (depending on your location) + public holidays - For our Team, we offer both hybrid and fully remote working options - Option to purchase 5 additional days of holiday through a salary sacrifice - We use MyndUp to give our employees access to free mental health and well-being support - Paid parental leave ## Skills ### Required - MITRE ATT&CK - NIST - CIS benchmarks - SIEM - logging pipeline design - cloud architectures - AWS - GCP - AI - coding automation ### Nice to have - fintech - payments - fraud - trust & safety - highly regulated environments --- Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/pleo/ec0ccfe9-8f21-404a-afba-079573f9ae89?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)