Remote Lead SecOps Engineer: AI-Powered Security & IR

payabl.; Lisboa; Presencial; EUR 90 000 - 140 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Provident Fund

Annual Learning Budget

Wolt allowance €150/month

SportsBenefits membership

Company car after year (eligibility)

Parking space

25 days vacation + holidays + 10 sick

Discount card & events tickets

Greek language classes

Global company events

Resumo da oferta

payabl. is seeking a Lead SecOps Engineer to design and build security operations for a regulated payments group. You will own the technical direction of the detection and response stack and operate with independence.

You will lead the SIEM build, vulnerability management and incident processes, while driving security hardening of AWS, IAM and network controls. This role emphasizes automation, IaC and AI-assisted operations across engineering teams.

Qualificações

• 5+ years in security operations or security engineering with incident-reporting obligations (DORA, PCI DSS)
• Hands-on experience with SIEM platforms and log pipeline engineering
• Strong AWS security knowledge incl. GuardDuty, Security Hub, IAM and VPC controls
• Experience running vulnerability management with scanners and remediation tracking
• Strong IaaC skills
• Interest in AI-assisted security operations using LLMs and agents
• Ability to own a domain end-to-end, prioritise and deliver

Responsabilidades

• Design, build and operate the SIEM from ground up, including architecture, deployment and tuning
• Establish attack-surface monitoring and internet exposure reviews
• Integrate AI-assisted triage and enrichment into the pipeline
• Stand up the vulnerability management programme with prioritisation and reporting
• Implement vulnerability lifecycle processes and remediation SLAs
• Operate and improve the security incident process end to end
• Develop runbooks, playbooks and event handlers; automate where possible
• Harden and monitor AWS estate: GuardDuty, Security Hub triage and remediation
• Drive security hardening across infrastructure and runtime
• Automate routine operations using scripts, APIs and IaC
• Run PoCs, evaluate tooling, shape the security roadmap
• Provide security engineering consultancy to Engineering, IT and DevOps teams

Conhecimentos

SIEM platforms

AWS security

Vulnerability management

IaC

AI-assisted security

Independent ownership

Security incident response

Ferramentas

Elastic/OpenSearch

Wazuh

Splunk

GuardDuty

Security Hub

Descrição da oferta de emprego

payabl. is seeking a Lead SecOps Engineer to design and build security operations for a regulated payments group. You will own the technical direction of the detection and response stack and operate with independence.

You will lead the SIEM build, vulnerability management and incident processes, while driving security hardening of AWS, IAM and network controls. This role emphasizes automation, IaC and AI-assisted operations across engineering teams.