Senior SecOps Architect & Incident Lead

Pleo; España; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Pleo card

Lunch provided

Private healthcare

25–28 days holiday

Hybrid and remote options

Parental leave

Mental health support

Descripción de la vacante

Pleo is seeking a Lead Security Operations Engineer to shape and own the SecOps function for a fast-growing fintech. You will define the roadmap, drive incident response, and scale our SIEM and detection capabilities across a cloud-first environment.

You will work with cross-functional teams to translate threat models into shippable security controls, while mentoring engineers and improving on-call processes. This role offers remote/hybrid options and comprehensive security benefits.

Formación

• 10+ years in security operations, incident response, or related field with measurable risk reductions.
• Strong development background; able to build automation, not just specify it.
• Hands-on SOC and SIEM management with log pipeline design.

Responsabilidades

• Define and deliver SecOps roadmap based on MITRE ATT&CK, NIST, and CIS.
• Lead security investigations, forensics, and incident response processes.
• Scale SIEM/logging pipelines across services to preserve signal.
• Improve perimeter, authentication posture, and WAF configurations.
• Automate detection/response workflows and reduce manual toil.
• Develop dashboards showing response times, coverage, and risk reduction.

Conocimientos

Security operations

Incident response

SIEM management

Cloud security (AWS/GCP)

DevSecOps

Automation

Python/Coding

Fintech/payments security

Herramientas

SIEM tooling

Descripción del empleo

Pleo is seeking a Lead Security Operations Engineer to shape and own the SecOps function for a fast-growing fintech. You will define the roadmap, drive incident response, and scale our SIEM and detection capabilities across a cloud-first environment.

You will work with cross-functional teams to translate threat models into shippable security controls, while mentoring engineers and improving on-call processes. This role offers remote/hybrid options and comprehensive security benefits.