SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Pelico is a manufacturing orchestration platform trusted by industrial leaders like Airbus, Boeing, and Safran. Founded in 2019 and backed by General Catalyst and 83North, the company has raised $72M and is growing 300% year-over-year. Headquartered in Paris with offices in Miami, London, and Amsterdam, Pelico uses AI to connect fragmented supply chain, production, and quality data into a single operational picture.
As Security Operations Lead, you will own the operational effectiveness of Pelico's security monitoring, incident response, and vulnerability management. This is a hands-on technical leadership role reporting to the CISO, working closely with Engineering, IT, and external security partners to build reliable, scalable security operations that protect the platform, support enterprise customers, and enable future regulated deployments.
Key responsibilities include:
- Own security monitoring, detection, and incident response by implementing and operating SIEM and SOAR capabilities alongside a managed Security Operations Center (SOC). Ensure reliable telemetry across cloud, application, and identity environments; build and tune detections for account compromise, privilege escalation, suspicious cloud activity, and data exfiltration; and establish 24/7 monitoring and escalation processes.
- Lead security investigations and response readiness by developing incident response playbooks, automating enrichment and triage, leading technical investigations with Engineering and IT, establishing approval gates, exercising response plans, and translating lessons learned into practical improvements.
- Own vulnerability management and CNAPP operations by deploying and operating a Cloud-Native Application Protection Platform across cloud assets, workloads, containers, and code repositories. Prioritize findings based on exploitability, exposure, and asset criticality, and bring cloud, code, dependency, secrets, and testing findings into a single actionable remediation workflow.
- Drive accountable remediation and security testing by partnering with Engineering to assign owners, establish deadlines, verify fixes, manage SLAs, and escalate overdue risks. Coordinate urgent mitigations for actively exploited vulnerabilities, maintain time-bound risk exceptions, and plan penetration tests with qualified external providers.
- Strengthen cloud security and secure delivery by partnering with Engineering to improve cloud IAM, secrets management, network exposure, encryption, logging, and secure configuration. Embed code, dependency, container, and secrets checks into CI/CD and infrastructure-as-code workflows, and contribute to threat modeling for significant architecture changes and customer deployments.
- Build operational assurance and regulated readiness by maintaining security runbooks, coverage inventories, and evidence of operational controls. Support ISO 27001, SOC 2, enterprise customer assurance, and future US regulated deployments through appropriate logging, access controls, vulnerability remediation, and incident coordination.
Requirements:
- Strong hands-on experience in security operations, cloud security, or DevSecOps with direct ownership of production security capabilities
- Experience deploying and operating SIEM solutions, building and tuning detections, investigating alerts, and partnering with an internal or managed SOC
- Practical experience with SOAR or security automation, including integrations, enrichment, and safe response workflows
- Experience operating a CNAPP or equivalent cloud and workload security tooling, with a track record of driving findings through remediation
- Solid understanding of cloud IAM, networking, logging, containers, Kubernetes, and infrastructure as code, including how misconfigurations create exploitable attack paths
- Familiarity with secure SDLC practices, CI/CD, dependency and container scanning, secrets detection, and vulnerability remediation
- Ability to automate security workflows using Python, shell scripting, APIs, or equivalent tools
- Experience coordinating technical incident response and communicating clearly under pressure with sound judgment around containment and escalation
- Ability to influence Engineering teams, translate technical findings into practical fixes, and balance security urgency with business constraints
- Strong written communication in English, disciplined documentation, and comfort working across US and European teams
- Active embrace of AI tools as part of your work with curiosity about new capabilities
- Hands-on experience with AI-assisted workflows and genuine interest in staying at the frontier of these tools
Nice to have: Azure security experience, ISO 27001/SOC 2 support experience, familiarity with US defense requirements (DoD IL5, NIST SP 800-171, CMMC, ITAR), or experience building security operations in a growing SaaS company.
