SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mollie is a fast-growing European fintech serving 250,000+ businesses with an all-in-one payments and money management platform. The Security Operations Engineer II is a hands-on role focused on operational security through incident response, threat hunting, threat intelligence analysis, and security automation.
You will join an experienced SecOps team of mid- to senior-level experts, working on critical security initiatives with significant autonomy and decision-making authority.
Key responsibilities include:
- Responding to and investigating security incidents in coordination with internal teams and external parties, following established procedures and best practices
- Developing and enhancing security playbooks and runbooks for incident response and threat hunting
- Proactively hunting for threats not easily detected by existing monitoring
- Defining monitoring scenarios and developing prototype detection rules based on security intelligence and defense gaps
- Participating in incident response rotation and on-call procedures
- Identifying potential threats and delivering strategic reports with actionable recommendations
- Creating reports, dashboards, and security metrics to communicate security posture
- Automating repetitive security tasks to improve efficiency
- Collaborating with the Security Engineering team to improve overall security posture and detection capabilities
- Identifying optimization opportunities and implementing process improvements
Requirements:
- Experience in a fast-growing product company with strong ownership mindset in fast-paced environments
- Experience working within a Security Operations team (preferred)
- Ability to work independently, prioritize workload, and collaborate cross-functionally
- Strong understanding of security concepts: cyberattacks, TTPs, threat vectors, controls, risk management, and incident response
- Experience with SIEM (Security Incident and Event Management) and SOAR (Security Orchestration and Automated Response) platforms
- Experience with Threat Intelligence, Threat Hunting, and EDR tools (e.g., Crowdstrike, Sysdig)
- DevOps environment experience, ideally with DevSecOps approach
- Knowledge of regulatory compliance frameworks: NIST, PCI DSS, GDPR, DORA
- Experience with "3 lines of defense" model, auditor management, and control management
- Familiarity with cloud platforms (GCP preferred) and experience with Linux, macOS, Kubernetes, Terraform, and GitLab
- Ability to automate workflows; Python scripting preferred
- Customer-centric, pragmatic, and risk-aware mindset
