Staff SecOps Engineer: Detection, Response & Automation

Pleo; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Pleo card

Lunch provided

Private healthcare

Holiday allowance

Hybrid/Remote options

Parental leave

Job summary

Pleo is seeking a Staff Security Operations Engineer to lead our SecOps program. You will own the detection, response, and investigation capabilities for a fintech scale-up with a fast-growing customer base.

You will report to the VP of Fraud & Security and collaborate with Fraud, Engineering, Risk & Compliance to build a resilient security operations function across AWS and GCP environments. This role offers a high-impact, hands-on opportunity to shape security tooling, incident response, and

Qualifications

• 10+ years of experience in security operations, incident response, or related discipline.
• Strong development and engineering background; able to write automation.
• Hands-on SOC and SIEM management experience with detection engineering and logging pipelines.
• Experience in scale-up environments; built capability rather than inherited a mature one.
• Good understanding of cloud architectures (AWS; some GCP) and how infra affects detection and response.

Responsibilities

• Build and own a structured SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics from traffic to incident response.
• Design, tune, and scale SIEM/logging pipeline across services to reduce noise.
• Strengthen perimeter and authentication posture (WAF, authorization, monitoring).
• Protect data via DLP controls and ensure coverage where data lives.
• Improve on-call rotation, alerting, escalation paths, and SLAs.
• Automate detection and response workflows using code and AI.
• Reduce SecOps risk by addressing compliance gaps and collecting evidence.
• Build dashboards and reports for leadership visibility on response times, coverage, and risk.
• Translate threat models for engineers to ship secure features.

Skills

Security operations

Incident response

Automation / scripting

Threat detection engineering

Cloud architecture (AWS/GCP)

Education

Bachelor's degree or higher

Tools

SIEM

Log pipeline design

DLP

Job description

Pleo is seeking a Staff Security Operations Engineer to lead our SecOps program. You will own the detection, response, and investigation capabilities for a fintech scale-up with a fast-growing customer base.

You will report to the VP of Fraud & Security and collaborate with Fraud, Engineering, Risk & Compliance to build a resilient security operations function across AWS and GCP environments. This role offers a high-impact, hands-on opportunity to shape security tooling, incident response, and