4 hours ago
Copenhagen, Denmark +6 moreStaff+
Responsibilities
- Define and own a SecOps roadmap aligned with MITRE ATT&CK, NIST, and CIS benchmarks.
- Lead security investigations, digital forensics, incident response, and the incorporation of findings into detection and prevention improvements.
- Design, tune, and scale SIEM and standardized logging pipelines across services.
- Strengthen perimeter and authentication security through WAF configuration, authorization tuning, and suspicious-traffic monitoring.
- Implement DLP controls and align coverage with sensitive-data locations.
- Improve the on-call rotation, alerting, escalation paths, and response SLAs.
- Automate detection and response workflows using code and AI to reduce manual effort and resolution time.
- Reduce security-operations risk from compliance gaps and collect supporting evidence.
- Build dashboards and reporting for response times, coverage, and risk reduction.
- Partner with non-security engineers to translate threat models into shippable changes and help develop less experienced security engineers.
Requirements
- 10+ years of experience in security operations, incident response, or a closely related discipline.
- Demonstrated material risk reduction through outcomes such as financial impact, incidents contained, or forensics that changed outcomes.
- Strong software development and engineering background with the ability to write security automation.
- Hands-on SOC and SIEM management experience, including detection engineering and log-pipeline design.
- Experience building security capabilities in scale-up environments.
- Strong understanding of cloud architectures, including AWS and exposure to GCP.
- Experience using AI and/or coding automation to implement and operate security controls.
- Experience in fintech, payments, fraud, trust and safety, or highly regulated environments is advantageous.
- Relevant backgrounds include incident response, IR management, SOC engineering, security engineering, DevSecOps, red team, or blue team work.
- Willingness to participate in an on-call rotation and work hands-on with security tooling.
Benefits
- Remote, hybrid, or in-person work options are available depending on location.
- Pleo card and catered meals or a lunch allowance for work days.
- Comprehensive private healthcare, with coverage options varying by location.
- 25–28 days of holiday plus public holidays.
- Option to purchase five additional holiday days through salary sacrifice.
- Access to free mental health and well-being support through MyndUp.
- Paid parental leave.
- Opportunity to grow into larger projects, leadership, and potentially people management.
Tech Stack
Categories
About Pleo
Pleo builds a spend management platform for businesses, combining corporate cards with software for expenses, reimbursements, invoices, and budgeting. It sells a subscription-based SaaS product that integrates with popular accounting systems and supports physical and virtual cards for teams. Founded in 2015 and headquartered in Copenhagen, Pleo operates across multiple European markets and serves companies seeking to control and automate day-to-day spending.