Staff SecOps Engineer: Lead Detection & Response (Remote)

Pleo; Denmark; Hybrid; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

Your own Pleo card

Lunch is on us

Comprehensive private healthcare

25-28 days of holiday

Hybrid and fully remote options

Paid parental leave

Job summary

Pleo is seeking a Staff Security Operations Engineer to join our Cybersecurity team. You will define and deliver the SecOps roadmap, building detection, response, and investigation capabilities for a fast-growing fintech environment.

You will own end-to-end security operations, from strategy to code, shaping how we detect, respond, and evolve with the business. This role offers remote, hybrid, or in-person options across Denmark.

Qualifications

• 10+ years in security operations or related field.
• Hands-on SOC and SIEM management experience.
• Experience with cloud architectures (AWS, GCP) and automation.

Responsibilities

• Build and own a SecOps roadmap aligned with MITRE ATT&CK, NIST, and CIS.
• Lead investigations and forensics from data collection to incident response.
• Design and scale SIEM/log pipeline across services.
• Strengthen perimeter and authentication postures (WAF, auth tuning).
• Protect data with DLP controls.
• Improve on-call rotation and incident response SLAs.
• Automate detection and response using code and AI.
• Reduce risk via compliance gaps and evidence collection.
• Build dashboards showing response times, coverage, risk reduction.
• Collaborate with engineers without security background.

Skills

Security operations

Incident response

Automation development

SOC engineering

Cloud architectures (AWS, GCP)

Tools

SIEM

Logging pipeline

WAF configuration

AI automation tooling

Job description

Pleo is seeking a Staff Security Operations Engineer to join our Cybersecurity team. You will define and deliver the SecOps roadmap, building detection, response, and investigation capabilities for a fast-growing fintech environment.

You will own end-to-end security operations, from strategy to code, shaping how we detect, respond, and evolve with the business. This role offers remote, hybrid, or in-person options across Denmark.