Senior SecOps Engineer — FinTech Incident Response Lead

Pleo; København; Hybrid; DKK 900,000 - 1,600,000; Full time

Benefits offered by this job

Your own Pleo card (no more out-of-po­

Lunch is on us for your work days - a 

Comprehensive private healthcare - 2

25-28 days holiday + public holidays

Hybrid and fully remote options

5 extra days of holiday via salary-sac

Mental health and well-being support

Paid parental leave

Job summary

Pleo is seeking a Staff Security Operations Engineer to lead the SecOps roadmap, building detection, response and investigation capabilities for a fast-growing fintech business. You will own security operations end to end, collaborating with Fraud, DevSecOps, Engineering and Risk & Compliance to protect customers and their money.

You bring 10+ years in security operations, hands-on SOC/SIEM experience, and strong cloud expertise (AWS/GCP).

Qualifications

• 10+ years of experience in security operations, incident response, or a closely related discipline.
• Strong development and engineering background with automation
• Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design
• Experience in scale-up environments, where you've built capability rather than inherited a mature one
• Strong understanding of cloud architectures (AWS and GCP) and how infrastructure decisions shape detection and response
• Demonstrated experience using AI and/or coding automation to get security controls built and operating
• Fintech, payments, fraud, or trust & safety experience is an advantage in highly regulated environments
• Backgrounds that tend to do well here: IR management, IR, SOC engineering, security engineering, DevSecOps, red/blue team

Responsibilities

• Build and own a SecOps roadmap aligned with MITRE ATT&CK, NIST, and CIS.
• Lead security investigations and forensics from incident to response.
• Design, tune, and scale our SIEM and logging pipeline with standardized log ingestion across services.
• Strengthen perimeter and authentication posture, including WAF configuration and alerting.
• Protect sensitive data through DLP controls and data-location coverage.
• Improve on-call rotation, alerts, escalation paths, and response SLAs.
• Automate detection and response workflows using code and AI.
• Reduce SecOps risk by closing compliance gaps and gathering evidence.
• Create dashboards and reports showing response times, coverage, and risk reduction.
• Collaborate with engineers to translate threat models into shipable changes

Skills

Security operations

Incident response

Automation development

SOC management

SIEM management

AWS & GCP

Threat modeling

Fintech/fraud experience

IR management

DevSecOps

Job description

Pleo is seeking a Staff Security Operations Engineer to lead the SecOps roadmap, building detection, response and investigation capabilities for a fast-growing fintech business. You will own security operations end to end, collaborating with Fraud, DevSecOps, Engineering and Risk & Compliance to protect customers and their money.

You bring 10+ years in security operations, hands-on SOC/SIEM experience, and strong cloud expertise (AWS/GCP).