Staff Security Operations Engineer - Remote/Hybrid Impact

Creandum; Madrid; Hybrid; EUR 120,000 - 160,000; Full time

Job summary

Pleo is seeking a Staff Security Operations Engineer to lead our SecOps function. You will own the roadmap from strategy to code, building detection, response, and investigation capabilities for a fast-growing fintech.

You will partner with Fraud, DevSecOps, Engineering, and Risk & Compliance to mature the security program. We value hands-on engineers who can automate security controls, design scalable log pipelines, and drive incident response improvements while collaborating across the

Qualifications

• 10+ years in security operations, incident response, or related field with proven risk reduction impact.
• Strong development/engineering background; able to write automation.
• Hands-on SOC and SIEM management, including detection engineering and log pipelines.
• Experience in scale-up environments; built capability rather than inherited.
• Understanding of cloud architectures (AWS, with GCP presence) and how it shapes detection.
• Experience using AI and coding automation to implement controls.
• Fintech/payments/fraud or trust & safety experience is a real advantage.
• Backgrounds in IR, SOC engineering, security engineering, DevSecOps, red/blue team.

Responsibilities

• Build and own a structured SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics from traffic to incident response.
• Design, tune, and scale SIEM and logging pipelines across services.
• Strengthen perimeter and authentication posture, including WAF config and monitoring.
• Protect data via DLP controls and align coverage with data locations.
• Improve on-call rotation, define alerting, escalation paths, and SLAs.
• Automate detection and response workflows using code and AI.
• Reduce SecOps risk by addressing compliance gaps and collecting evidence.
• Build dashboards and reporting for visibility into response times, coverage, and risk.
• Collaborate with engineers across teams, translating threat models into deliverables.

Skills

Security operations

Incident response

SOC engineering

SIEM

Cloud (AWS)

Automation coding

Fintech security

IR management

DevSecOps

Threat modeling

Tools

SIEM

Log pipeline

Automation tooling

Job description

Pleo is seeking a Staff Security Operations Engineer to lead our SecOps function. You will own the roadmap from strategy to code, building detection, response, and investigation capabilities for a fast-growing fintech.

You will partner with Fraud, DevSecOps, Engineering, and Risk & Compliance to mature the security program. We value hands-on engineers who can automate security controls, design scalable log pipelines, and drive incident response improvements while collaborating across the