Staff Security Operations Engineer
Job description
A Staff Security Operations Engineer at Pleo who will define and deliver the SecOps roadmap, building detection, response, and investigation capability for a fast-growing fintech. The role owns the security operations function end to end, from framework-based strategy through to automation code.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Remote
- Languages
- English – fluent
What you'll do
- Build and own a structured SecOps roadmap grounded in well-known frameworks such as MITRE ATT&CK, NIST, and CIS benchmarks.
- Lead security investigations and digital forensics, from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent.
- Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise.
- Strengthen our perimeter and authentication posture, including WAF configuration, authorisation tuning, and monitoring for suspicious traffic.
- Protect sensitive data through DLP controls, and make sure the coverage matches where the data actually lives.
- Improve our on-call rotation for the team, defining the alerting, escalation paths, and response SLAs that make it work.
- Automate detection and response workflows, using code and AI to reduce manual toil and shorten time to resolution.
- Reduce SecOps-attributed risk identified through compliance gaps, and collect the evidence that demonstrates it.
- Build dashboards and reporting that give the team and leadership real visibility into response times, coverage, and risk reduction.
- Work cross-functionally with engineers who don't have a security background, translating threat models into changes they can actually ship.
What we're looking for
- 10+ years of experience in security operations, incident response, or a closely related discipline, with a proven track record of materialised risk reduction through monetary impact, incidents contained, forensics that changed outcomes.
- A strong development and engineering background. You are comfortable writing the automation, not just specifying it.
- Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design.
- Experience in scale-up environments, where you've built capability rather than inherited a mature one.
- A strong understanding of cloud architectures as we use AWS. With part of our estate on GCP and how infrastructure decisions shape detection and response.
- Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice.
- You're not up for participating in an on-call rotation.
Nice to have
- Fintech, payments, fraud, or trust & safety experience is a real advantage, as is exposure to highly regulated environments.
- Backgrounds that tend to do well here: incident response, IR management, SOC engineering, security engineering, DevSecOps, red or blue team.
Your team
Cybersecurity team
Highly collaborative team dedicated to protecting Pleo's customers and their money; you'll report to the VP of Fraud & Security and work closely with Fraud, DevSecOps, Engineering, and Risk & Compliance.
Benefits
Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work
- Your own Pleo card (no more out-of-pocket spending!)
- Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office
- Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis
- We offer 25-28 days of holiday (depending on your location) + public holidays
- For our Team, we offer both hybrid and fully remote working options
- Option to purchase 5 additional days of holiday through a salary sacrifice
- We use MyndUp to give our employees access to free mental health and well-being support with great success so far
How to get hired
- 1Intro call: A 30-minute chat with our Talent Partner to discuss the role and your background.
- 2Hiring Manager interview: a 60-minute conversation covering your experience, how you approach security operations, and how you communicate.
- 3Technical deep dive: a 60-minute session with two of our SecOps engineers, going deep on SIEM, detection engineering, your coding and automation experience.
- 4Cross-functional interview: a 45-minute conversation with DevSecOps and Engineering leadership on how you work across team boundaries with other senior engineers.
Apply
About Pleo
We build spend solutions that make managing money seamless, empowering, and surprisingly effective for finance teams and employees alike - with a vision to help all businesses 'go beyond'.
Pleo builds spend solutions that make managing money seamless, empowering, and surprisingly effective for finance teams and employees alike. The word 'Pleo' means 'more than you'd expect', and living by that mantra has been the secret to our success over the last 10 years. We're a driven, progressive, and kind bunch of 850+ people from over 100 nationalities, all committed to delivering the future of business spending, together.
Mission
To help all businesses 'go beyond' by changing messy spend management and tedious processes.
Key facts
- 850+ people
- Fintech / business spend management
- 40,000+ customers
- 850+ people from over 100 nationalities
- 10 years of success
- Pre-IPO company
What they value
- Take pride in uncovering customer needs
- Turn complex problems into simple solutions
- Challenge the way things are done (respectfully)
- Always aim high
- Kind