Lead SecOps Engineer (Remote) — Fintech Detection & Automation

Pleo; Denmark; Hybrid; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

Hybrid and remote options

Private healthcare

Generous holidays 25–28 days

Pleo card & lunch

Mental health support

Parental leave

Job summary

Pleo is seeking a Lead Security Operations Engineer to own the SecOps roadmap and drive end-to-end security operations for a fast-growing fintech. You will lead investigations, enhance detection, and scale our SIEM and logging pipelines while partnering with cross-functional teams to ship secure features.

The role emphasizes hands-on tooling, automation, and a strong cloud background in AWS and GCP, with a focus on reducing risk and delivering measurable security outcomes.

Qualifications

• 10+ years of experience in security operations or incident response.
• Strong development background; comfortable writing automation.
• Hands-on SOC and SIEM management, including detection engineering.
• Experience in scale-up environments; built capability rather than inherited.
• Strong understanding of cloud architectures (AWS; some GCP) and how infra affects detection.
• Demonstrated experience using AI and/or coding automation to deploy security controls.
• Fintech, payments, fraud, or trust & safety exposure is a real advantage.
• Backgrounds in IR management, SOC engineering, security engineering, DevSecOps, red/blue team.

Responsibilities

• Build and own a structured SecOps roadmap using MITRE ATT&CK, NIST, CIS benchmarks.
• Lead security investigations and digital forensics, from suspicious traffic to incident response.
• Design, tune, and scale SIEM and logging pipelines for clear signal.
• Strengthen perimeter and authentication posture including WAF and access controls.
• Protect sensitive data with DLP controls aligned to data locations.
• Improve on-call rotation, alerts, escalation paths, and response SLAs.
• Automate detection and response workflows using code and AI.
• Reduce SecOps risk by addressing compliance gaps with evidence.
• Build dashboards and reports for leadership visibility on response times.
• Collaborate with engineers to translate threat models into shipable changes.

Skills

Security operations

Incident response

Automation development

Cloud architecture

AI automation

Threat modeling

Fintech/regulatory experience

IR management / SOC engineering

Tools

SIEM

Log pipelines

Automation scripting

MITRE ATT&CK

Job description

Pleo is seeking a Lead Security Operations Engineer to own the SecOps roadmap and drive end-to-end security operations for a fast-growing fintech. You will lead investigations, enhance detection, and scale our SIEM and logging pipelines while partnering with cross-functional teams to ship secure features.

The role emphasizes hands-on tooling, automation, and a strong cloud background in AWS and GCP, with a focus on reducing risk and delivering measurable security outcomes.