SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Teya is a Series C fintech platform serving local businesses across Europe with financial tools, payments, and business management solutions. As Senior SecOps Specialist, you will lead the security operations function, protecting Teya through detection, investigation, and response to security incidents while building scalable, reliable security operations.
You will serve as L3 escalation for the SOC team and MSSP partners, leading end-to-end investigation and response of complex security incidents. You'll coordinate across Security Engineering, IT, Infrastructure, Platform, Cloud, and Product teams during incidents, making risk-based decisions under pressure with strong documentation. You'll maintain and continuously improve incident playbooks, runbooks, and workflows, driving post-incident reviews and tracking key metrics like MTTD and MTTR.
On the tooling side, you'll operate and improve core security platforms including SIEM, EDR, email security, case management, and vulnerability tools. You'll monitor health, coverage, and data quality; troubleshoot ingestion and integration issues; and build automations to reduce operational toil. You'll apply engineering practices like version control, testing, and peer review to security operations.
You'll own vulnerability management—analyzing and prioritizing vulnerabilities, working with Engineering and IT on remediation, tracking fixes, and identifying recurring issues to recommend preventative controls. You'll build and maintain detection rules and queries across the full lifecycle (build, test, tune, measure, retire), reducing false positives and mapping detections to threat behaviors using frameworks like MITRE ATT&CK.
Log and telemetry management is critical: you'll onboard and maintain log sources across cloud, identity, endpoint, network, and SaaS systems, ensuring completeness and usability for detection and investigation. You'll monitor threat intelligence, translate it into detections and remediation actions, and share actionable insights with relevant teams.
You'll partner with Engineering and Platform teams on security requirements, manage security work in Jira, and contribute to technical design discussions. You'll automate SOC workflows using APIs, cloud services, and scripting, applying secure engineering practices and exploring AI/automation opportunities to reduce manual effort.
