Lead Security Ops Engineer - Remote, AI-Driven SecOps

Pleo; Portugal; Híbrido; EUR 90 000 - 125 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Private healthcare

Flexible working options

Pleo card

Lunch allowance

Additional holiday days

Parental leave

Resumo da oferta

Pleo, a leading fintech company, is hiring a Lead Security Operations Engineer to own and deliver the SecOps roadmap. You will drive detection, response, and investigation capabilities across a fast-growing fintech environment, partnering with Fraud, Engineering, and Risk teams to protect customer money.

You will build scalable SIEM/logging, automate detection workflows, and strengthen security postures across cloud environments (AWS primarily, with GCP).

Qualificações

• 10+ years in security operations, incident response, or a closely related discipline.
• Strong automation and engineering background with hands-on coding experience.
• Hands-on SOC and SIEM management, including detection engineering and log pipeline design.
• Experience in scale-up environments and building capability rather than inheriting a mature setup.
• Strong understanding of cloud architectures with AWS as primary, plus GCP.
• Demonstrated use of AI or coding automation to implement security controls.
• Fintech, payments, fraud, or trust & safety exposure is advantageous.
• Relevant senior security roles such as IR management, SOC engineering, or DevSecOps.

Responsabilidades

• Build and own a SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS.
• Lead security investigations and digital forensics from initial exposure to incident closure.
• Design and scale SIEM and log pipelines to preserve signal and reduce noise.
• Strengthen perimeter controls, including WAF tuning and authentication monitoring.
• Oversee data protection via DLP controls aligned with data location.
• Improve on-call rotation, define alerts, escalation paths, and SLAs.
• Automate detections and responses using code and AI to reduce toil.

Conhecimentos

Security ops

Incident response

Automation coding

SOC engineering

SIEM management

Cloud architecture

AWS

GCP

AI automation

Fintech experience

Ferramentas

SIEM platforms

AWS

GCP

Descrição da oferta de emprego

Pleo, a leading fintech company, is hiring a Lead Security Operations Engineer to own and deliver the SecOps roadmap. You will drive detection, response, and investigation capabilities across a fast-growing fintech environment, partnering with Fraud, Engineering, and Risk teams to protect customer money.

You will build scalable SIEM/logging, automate detection workflows, and strengthen security postures across cloud environments (AWS primarily, with GCP).