Lead Security Operations Engineer

Pleo

Lead SecOps engineer protecting Pleo's fintech spend-management platform. Building detection, response, forensics, SIEM, automation, and risk-reduction capabilities.

Posted 8/13/2026full-timeLondon • 🇬🇧 United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations, incident response, and risk reduction, with a strong focus on automation and cloud security. Capable of leading security investigations, designing detection capabilities, and mentoring security teams in a fast-paced environment.

Highest-signal resume keywords

Security Operations ManagementIncident ResponseDetection EngineeringSIEM ManagementCloud Security (AWS, GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Automation DevelopmentDigital ForensicsRisk ReductionLog Pipeline DesignDLP ImplementationWAF ConfigurationIncident Response ManagementSecurity Capability BuildingThreat ModelingCompliance Risk Management

Soft Skills

MentoringCollaborationLeadership

Tools & Technologies

SIEMMITRE ATT&CKNISTCIS BenchmarksAI Automation

Industry Keywords

FintechPaymentsFraudTrust and SafetyRegulated Environments

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Define and deliver Pleo's SecOps roadmap for detection, response, and investigation capabilities
Build a structured roadmap based on MITRE ATT&CK, NIST, and CIS benchmarks
Lead security investigations and digital forensics through incident response
Design, tune, and scale SIEM and standardized logging pipelines
Strengthen perimeter and authentication security through WAF configuration, authorization tuning, and suspicious-traffic monitoring
Implement DLP controls aligned with sensitive-data locations
Improve the on-call rotation, alerting, escalation paths, and response SLAs
Automate detection and response workflows using code and AI
Reduce SecOps-attributed compliance risk and collect supporting evidence
Build dashboards and reporting for response times, coverage, and risk reduction
Translate threat models into shippable engineering changes
Partner with Fraud, DevSecOps, Engineering, and Risk & Compliance
Mentor less experienced security engineers and help mature the security operations function
In the first six months, assess the security landscape, publish and begin delivering the roadmap, establish on-call SLAs, ship detection and automation improvements, and define KPIs

Requirements

What you’ll need

10+ years of experience in security operations, incident response, or a closely related discipline
Proven materialized risk reduction through monetary impact, incidents contained, or forensics that changed outcomes
Strong development and engineering background, including writing automation
Hands-on SOC and SIEM management experience
Experience in detection engineering and log pipeline design
Experience building security capability in scale-up environments
Strong understanding of cloud architectures, especially AWS, with exposure to GCP
Demonstrated use of AI and/or coding automation to implement and operate security controls
Fintech, payments, fraud, or trust and safety experience is advantageous
Exposure to highly regulated environments is advantageous
Experience in incident response, IR management, SOC engineering, security engineering, DevSecOps, red team, or blue team
Willingness to participate in an on-call rotation
Must be physically based in the chosen country with valid right to work
Visa sponsorship is unavailable for the listed locations
Application must be submitted in English

Benefits

Comp & perks

Your own Pleo card (no more out-of-pocket spending!)
Catered meals or a lunch allowance based on your local office
Comprehensive private healthcare, with coverage options including Vitality, Alan or Médis depending on location
25–28 days of holiday depending on location, plus public holidays
Hybrid and fully remote working options
Option to purchase 5 additional days of holiday through salary sacrifice
Free mental health and well-being support through MyndUp
Paid parental leave
Career development opportunities, including bigger projects, leadership, and acquiring new skills
Potential scope for the role to grow into people leadership