Pleo

Security Operations

• Define and deliver Pleo's SecOps roadmap for detection, response, and investigation capabilities
• Build a structured roadmap based on MITRE ATT&CK, NIST, and CIS benchmarks
• Lead security investigations and digital forensics through incident response
• Design, tune, and scale SIEM and standardized logging pipelines
• Strengthen perimeter and authentication security through WAF configuration, authorization tuning, and suspicious-traffic monitoring
• Implement DLP controls aligned with sensitive-data locations
• Improve the on-call rotation, alerting, escalation paths, and response SLAs
• Automate detection and response workflows using code and AI
• Reduce SecOps-attributed compliance risk and collect supporting evidence
• Build dashboards and reporting for response times, coverage, and risk reduction
• Translate threat models into shippable engineering changes
• Partner with Fraud, DevSecOps, Engineering, and Risk & Compliance
• Mentor less experienced security engineers and help mature the security operations function
• In the first six months, assess the security landscape, publish and begin delivering the roadmap, establish on-call SLAs, ship detection and automation improvements, and define KPIs

Lead Security Operations Engineer