Description
We're looking for a Staff Security Operations Engineer to join our Cybersecurity team at Pleo. In this role, you'll define and deliver the SecOps roadmap, building the detection, response, and investigation capability that protects a fast-growing fintech.
As a Staff Security Operations Engineer, you will:
- Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks.
- Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent.
- Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise.
- Strengthen our perimeter and authentication posture, including WAF configuration, authorisation tuning, and monitoring for suspicious traffic.
- Protect sensitive data through DLP controls, and make sure the coverage matches where the data actually lives.
- Improve our on-call rotation for the team, defining the alerting, escalation paths, and response SLAs that make it work.
- Automate detection and response workflows, using code and AI to reduce manual toil and shorten time to resolution.
- Reduce SecOps-attributed risk identified through compliance gaps, and collect the evidence that demonstrates it.
- Build dashboards and reporting that give the team and leadership real visibility into response times, coverage, and risk reduction.
- Work cross-functionally with engineers who don't have a security background, translating threat models into changes they can actually ship.
You'll thrive in this role if you have:
- 10+ years of experience in security operations, incident response, or a closely related discipline, with a proven track record of materialised risk reduction through monetary impact, incidents contained, forensics that changed outcomes.
- A strong development and engineering background. You are comfortable writing the automation, not just specifying it.
- Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design.
- Experience in scale-up environments, where you've built capability rather than inherited a mature one.
- A strong understanding of cloud architectures as we use AWS. With part of our estate on GCP and how infrastructure decisions shape detection and response.
- Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice.
- Fintech, payments, fraud, or trust & safety experience is a real advantage, as is exposure to highly regulated environments.
We offer a range of benefits, including:
- Your own Pleo card (no more out-of-pocket spending!)
- Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office
- Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis
- We offer 25-28 days of holiday (depending on your location) + public holidays
- For our Team, we offer both hybrid and fully remote working options
- Option to purchase 5 additional days of holiday through a salary sacrifice
- We use MyndUp to give our employees access to free mental health and well-being support
- Paid parental leave