Security Operations Engineer II
Hands-on security operations role at Mollie, a European payments fintech: respond to and investigate security incidents, hunt threats, build detection rules, playbooks, dashboards and metrics, and automate repetitive SecOps work. Core tech includes SIEM/SOAR, EDR (CrowdStrike/Sysdig), GCP, Kubernetes, Terraform and Python.
- Compensation
- Not disclosed
- Location
- Amsterdam
- Work setup
- Not specified
- Seniority
- Middle
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Experience in a fast-growing product company with a strong ownership mindset in a fast-paced environment
- Ability to work independently, prioritize workload, and collaborate with cross-functional teams
- A customer-centric approach that is both pragmatic and risk-aware
- Strong understanding of security concepts including cyberattacks, TTPs, threat vectors, controls, risk management, and incident response
- Experience with SIEM and SOAR
- Experience with Threat Intelligence, Threat Hunting, and EDR tools (e.g. CrowdStrike, Sysdig)
- Experience working in a DevOps environment and methodologies, ideally with a DevSecOps approach
- Experience with regulatory compliance frameworks and information security management standards like NIST, PCI DSS, GDPR, and DORA
- Experience with a '3 lines of defense' model, dealing with auditors, and managing controls
- Familiarity with cloud-based platforms (e.g., GCP) and experience with Linux, macOS, Kubernetes, Terraform, and GitLab
- Experience automating workflows
Nice to have
- Experience working within a Security Operations (SecOps) team in any role
- Python scripting
Full description
Build with us
Businesses deserve better from finance. Less friction, more freedom. Since 2004, Mollie has been on a mission to make payments and money management effortless for every business in Europe.
Today, more than 250,000 companies trust our all-in-one platform to get paid, manage money and grow on their terms. Simple, scalable and built with real businesses in mind.
We’re one of Europe’s fastest-growing fintechs, with 900+ Mollies across 12+ locations. Our people make this growth possible. We move fast, build with purpose and care deeply about our customers. Whether you're solving problems, building market-leading products or exploring how AI can make work smarter, you’ll have the freedom to create and the trust to deliver.
If you’re ready to grow, shape the future of fintech and join an ambitious, high-performing team, this is the place for you.
Your impact
Security is an essential and integral part of our business. The role of the Security Operations Engineer II lies at the heart of it all. This is a hands-on role focused on providing operational security for Mollie through resolving security incidents and running various security operations activities, including threat hunting, analysis of threat intelligence and automation.
You will join the existing SecOps team, consisting of mid- to senior-level experts, where you will find a lot of opportunities to shine and make an impact.
This role requires assisting in a wide range of security initiatives, involving self-directed and informed decision-making on critical security topics.
What you’ll ship
- Respond to security incidents, collaborating with other internal teams and external parties to ensure coordinated responses and minimize business disruption.
- Investigate and resolve security incidents, following established procedures and best practices.
- Develop and enhance security playbooks and runbooks to document standardized procedures for incident response, threat hunting etc.
- Collaborate with the Security Engineering team to improve our overall security posture and detection capabilities.
- Proactively hunt for threats not easily detected by existing use cases
- Define monitoring scenarios and develop prototype rules based on security intel or defense gaps.
- Participate in the incident response rotation and on-call procedures
- Identify potential threats, delivering strategic reports and changes like use case updates to minimise the impact of the threats.
- Create reports, dashboards, and security metrics to communicate security posture and insights.