Staff Security Operations Engineer — Remote Impact

Pleo; Stockholms kommun; Hybrid; SEK 900,000 - 1,400,000; Full time

Benefits offered by this job

Your own Pleo card

Lunch on us or lunch allowance

Comprehensive private healthcare

25–28 days holiday + public holidays

Hybrid and fully remote options

5 extra holidays via salary sacrifice

Mental health support via MyndUp

Paid parental leave

Job summary

Pleo is seeking a Staff Security Operations Engineer to join our Cybersecurity team. You will own the SecOps roadmap from strategy to code, protecting a fast-growing fintech and delivering end-to-end security operations.

You will report to the VP of Fraud & Security and collaborate with Fraud, DevSecOps, Engineering, Risk & Compliance. A strong engineering background, SOC/SIEM expertise, and experience with cloud security are required.

Qualifications

• 10+ years in security operations, incident response, or related field with measurable risk reduction.
• Strong development/engineering background; able to write automation.
• Hands-on SOC and SIEM management with detection engineering experience.
• Experience in scale-up environments; capable of building capability rather than inheriting.
• Solid understanding of cloud architectures (AWS; some GCP).
• Experience using AI or coding automation to implement security controls.
• Fintech/payments/trust & safety exposure is a plus; regulated environments help.
• Backgrounds in IR, SOC engineering, security engineering, DevSecOps, or red/blue team are valued.

Responsibilities

• Define and deliver the SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS.
• Lead security investigations and digital forensics from detection to incident response.
• Design and scale SIEM/log pipeline to maintain signal quality.
• Strengthen perimeter/authentication posture including WAF and access controls.
• Protect data with DLP controls and align coverage with data locations.
• Improve on-call rotations, alerts, escalation paths and response SLAs.
• Automate detection and response workflows using code and AI.
• Reduce risk through compliance gap closure and evidence collection.
• Create dashboards and reports for leadership visibility on response times and risk.
• Collaborate with non-security engineers to translate threat models into concrete changes.

Skills

Security operations

Incident response

Automation scripting

Cloud architectures

Threat modeling

Tools

SIEM

WAF

DLP

Cloud platforms (AWS/GCP)

Job description

Pleo is seeking a Staff Security Operations Engineer to join our Cybersecurity team. You will own the SecOps roadmap from strategy to code, protecting a fast-growing fintech and delivering end-to-end security operations.

You will report to the VP of Fraud & Security and collaborate with Fraud, DevSecOps, Engineering, Risk & Compliance. A strong engineering background, SOC/SIEM expertise, and experience with cloud security are required.