Security Operations Engineer

Who you are

• Experience in a fast-growing product company, with a strong ownership mindset in a fast-paced environment
• Experience working within a Security Operations (SecOps) team in any role is preferred
• Ability to work independently, prioritize workload, and collaborate with cross-functional teams
• A customer-centric approach that is both pragmatic and risk-aware
• Strong understanding of security concepts including cyberattacks, related TTPs, threat vectors, controls, risk management, and incident response
• Experience with Security Incident and Event Management and Security Orchestration and Automated Response
• Experience with Threat Intelligence, Threat Hunting, Endpoint Detection and Response tools (e.g. Crowdstrike, Sysdig)
• Experience working in a DevOps environment and methodologies, ideally with a DevSecOps approach
• Experience working with regulatory compliance frameworks and information security management standards like NIST, PCI DSS, GDPR, and DORA
• Experience with a “3 lines of defense” model, dealing with auditors, and managing controls
• Familiarity with cloud-based platforms (e.g., GCP) and experience with Linux, macOS, Kubernetes, Terraform, and GitLab
• Experience automating workflows, with Python scripting preferred

What the job involves

• Security is an essential and integral part of our business
• The role of the Security Operations Engineer II lies at the heart of it all
• This is a hands-on role focused on providing operational security for Mollie through resolving security incidents and running various security operations activities, including threat hunting, analysis of threat intelligence and automation
• You will join the existing SecOps team, consisting of mid- to senior-level experts, where you will find a lot of opportunities to shine and make an impact
• This role requires assisting in a wide range of security initiatives, involving self-directed and informed decision-making on critical security topics
• Respond to security incidents, collaborating with other internal teams and external parties to ensure coordinated responses and minimize business disruption
• Investigate and resolve security incidents, following established procedures and best practices
• Develop and enhance security playbooks and runbooks to document standardized procedures for incident response, threat hunting etc
• Collaborate with the Security Engineering team to improve our overall security posture and detection capabilities
• Proactively hunt for threats not easily detected by existing use cases
• Define monitoring scenarios and develop prototype rules based on security intel or defense gaps
• Participate in the incident response rotation and on-call procedures
• Identify potential threats, delivering strategic reports and changes like use case updates to minimise the impact of the threats
• Create reports, dashboards, and security metrics to communicate security posture and insights
• Automate repetitive security tasks to improve efficiency and free up time for more strategic security initiatives
• Identify areas for optimization, propose and implement process changes, collaborating with the team for efficient security operations

The application process

• Apply with your CV (in English)

Benefits

• Noise cancelling headphones
• MacBook
• Birthday off
• Complimentary baby days
• 20 days working from abroad
• 25 holiday days
• Commute reimbursement
• Work from home budget
• Bike lease plan
• Internet allowance
• In-office lunch
• Wellbeing program
• Pension contribution
• Health insurance
• Bonus scheme
• Equity plans
• Referral bonus
• Learning platform
• Mentor program