Lead SecOps Engineer: Detection & IR

Pleo; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private healthcare

Hybrid/Remote work options

Lunch provided or allowance

25–28 days holiday + holidays

Descripción de la vacante

Pleo is seeking a Lead Security Operations Engineer to own and deliver the SecOps roadmap for a fast-growing fintech. You’ll build and run end-to-end security operations, from threat modeling to detection, response, and forensics, partnering with Fraud, DevSecOps, Engineering, and Risk & Compliance.

You’ll lead investigations, design scalable SIEM/logging, strengthen perimeter security, and automate detection using code and AI.

Formación

• 10+ years of experience in security operations, incident response, or related discipline.
• Strong development and engineering background; able to write automation.
• Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design.
• Experience in scale-up environments; built capability rather than inherited.
• Strong understanding of cloud architectures (AWS; some GCP) and infrastructure decisions shaping detection and response.

Responsabilidades

• Build and own a structured SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics from detection to incident response.
• Design, tune, and scale SIEM and logging pipelines across services.
• Strengthen perimeter and authentication posture, including WAF and monitoring.
• Protect data with DLP controls and ensure coverage matches data locations.
• Improve on-call rotation, define alerts, escalation paths, and SLAs.
• Automate detection and response workflows using code and AI.
• Address compliance gaps and collect evidence for risk reduction.
• Build dashboards reporting on response times, coverage, and risk reduction.
• Collaborate with engineers to translate threat models into shippable changes.

Conocimientos

Security operations

Incident response

Automation coding

SOC management

Cloud AWS/GCP

Descripción del empleo

Pleo is seeking a Lead Security Operations Engineer to own and deliver the SecOps roadmap for a fast-growing fintech. You’ll build and run end-to-end security operations, from threat modeling to detection, response, and forensics, partnering with Fraud, DevSecOps, Engineering, and Risk & Compliance.

You’ll lead investigations, design scalable SIEM/logging, strengthen perimeter security, and automate detection using code and AI.