Lead SecOps Engineer - AI-Driven Security Operations (Remote)

payabl.; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Provident Fund

Annual Learning Budget

€150 Wolt monthly allowance

SportsBenefits

Company car after year (eligibility)

Complimentary parking

25 days vacation + holidays + 10 sick

Local discount card

Greek language classes

Global company events

Job summary

payabl. is seeking a Lead SecOps Engineer to design and build security operations for a regulated payments group. You will own the SIEM, vulnerability management programme, and security incident process, reporting to the Head of Information Security.

The role emphasizes AI-assisted alert triage and incident timelines, with independence to shape the security stack. You will work on AWS hardening, runbooks, and cross-team consultancy, while driving the technical roadmap and incident lifecycle.

Qualifications

• 5+ years in security operations or security engineering with incident reporting obligations (DORA/PCI DSS).
• Hands-on experience with SIEM platforms and log pipeline engineering.
• Strong AWS security knowledge (GuardDuty, Security Hub, IAM, VPC controls).
• Experience running vulnerability management and remediation tracking.
• Strong IaC skills and interest in AI-assisted security operations.

Responsibilities

• Design, build, and operate the SIEM from ground up including architecture and deployment.
• Onboard log sources across cloud and applications; ensure coverage and integration.
• Develop AI-assisted triage and enrichment in the pipeline; automate where possible.
• Lead vulnerability management programme deployment, prioritisation, and reporting.
• Implement governance and runbooks to streamline incident detection and response.
• Harden AWS estate and drive proactive security controls across infrastructure.

Skills

Security operations

SIEM platforms

AWS security

Vulnerability management

IaC

AI-assisted security

Incident response

Tools

Elastic/OpenSearch/Wazuh/Splunk

Job description

payabl. is seeking a Lead SecOps Engineer to design and build security operations for a regulated payments group. You will own the SIEM, vulnerability management programme, and security incident process, reporting to the Head of Information Security.

The role emphasizes AI-assisted alert triage and incident timelines, with independence to shape the security stack. You will work on AWS hardening, runbooks, and cross-team consultancy, while driving the technical roadmap and incident lifecycle.