[Hiring] Staff Security Operations Engineer @Pleo

Role Description

We're looking for a Staff Security Operations Engineer to join our Cybersecurity team at Pleo. In this role, you'll define and deliver the SecOps roadmap, building the detection, response, and investigation capability that protects a fast-growing fintech. If you're excited about owning a security operations function end to end, from framework-based strategy through to the code that makes it run, then this is the opportunity for you!

What you'll be doing

• Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent.
• Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise.
• Strengthen our perimeter and authentication posture, including WAF configuration, authorisation tuning, and monitoring for suspicious traffic.
• Protect sensitive data through DLP controls, and make sure the coverage matches where the data actually lives.
• Improve our on-call rotation for the team, defining the alerting, escalation paths, and response SLAs that make it work.
• Automate detection and response workflows, using code and AI to reduce manual toil and shorten time to resolution.
• Reduce SecOps-attributed risk identified through compliance gaps, and collect the evidence that demonstrates it.
• Build dashboards and reporting that give the team and leadership real visibility into response times, coverage, and risk reduction.
• Work cross-functionally with engineers who don't have a security background, translating threat models into changes they can actually ship.

Qualifications

• 10+ years of experience in security operations, incident response, or a closely related discipline, with a proven track record of materialised risk reduction through monetary impact, incidents contained, forensics that changed outcomes.
• A strong development and engineering background. You are comfortable writing the automation, not just specifying it.
• Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design.
• Experience in scale-up environments, where you've built capability rather than inherited a mature one.
• A strong understanding of cloud architectures as we use AWS, with part of our estate on GCP and how infrastructure decisions shape detection and response.
• Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice.
• Fintech, payments, fraud, or trust & safety experience is a real advantage, as is exposure to highly regulated environments.
• Backgrounds that tend to do well here: incident response, IR management, SOC engineering, security engineering, DevSecOps, red or blue team.

Requirements

• You want a large blast radius. We have high-impact projects where the outcome shows up in real business metrics, at a pre-IPO company.
• You're energised by building a function rather than maintaining one, and you'd rather set the roadmap than be handed it.
• You enjoy raising the bar around you, growing a team of specialists and lifting the people already here.
• You're equally at home in a threat model discussion and in an editor writing the automation that acts on it.

Benefits

• Your own Pleo card (no more out-of-pocket spending!)
• Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office.
• Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis.
• We offer 25-28 days of holiday (depending on your location) + public holidays.
• For our Team, we offer both hybrid and fully remote working options.
• Option to purchase 5 additional days of holiday through a salary sacrifice.
• We use MyndUp to give our employees access to free mental health and well-being support with great success so far.
• Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work.