Security Operations Lead
Hands-on security leadership role owning Pelico's security monitoring, incident response, and vulnerability management. You'll run SIEM/SOAR with a managed SOC, operate a CNAPP, drive cloud and CI/CD security with Engineering, and support ISO 27001/SOC 2 and future US regulated deployments.
- Compensation
- Not disclosed
- Location
- Miami
- Work setup
- Hybrid
- Seniority
- Lead
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Strong hands-on experience in security operations, cloud security, or DevSecOps, with direct ownership of production security capabilities
- Experience deploying and operating SIEM solutions, building and tuning detections, investigating alerts, and partnering with an internal or managed SOC
- Practical experience with SOAR or security automation, including integrations, enrichment, and safe response workflows
- Experience operating a CNAPP or equivalent cloud and workload security tooling, driving findings through remediation and verifying fixes
- Solid understanding of cloud IAM, networking, logging, containers, Kubernetes, and infrastructure as code, including exploitable attack paths
- Familiarity with secure SDLC practices, CI/CD, dependency and container scanning, secrets detection, and vulnerability remediation
- Ability to automate security workflows using Python, shell scripting, APIs, or equivalent tools
- Experience coordinating technical incident response and communicating clearly under pressure, with sound judgment on containment, escalation, and approvals
- Ability to influence Engineering teams, translate technical findings into practical fixes, and balance security urgency with business constraints
- Strong written communication in English, disciplined documentation, and comfort working across US and European teams
- Actively embraces AI tools and has hands-on experience with AI-assisted workflows
Nice to have
- Experience with Azure security and cloud-native production environments
- Experience supporting ISO 27001, SOC 2, enterprise customer security requirements, or independent security testing programs
- Familiarity with US defense-related requirements such as DoD IL5, NIST SP 800-171, CMMC, or ITAR, including shared-responsibility models
- Experience building a security operations capability in a growing SaaS company
Full description
About Pelico
Traditional industrial manufacturing systems were built for predictability. Supply chains no longer are. Today, real-time data is buried in legacy tools that weren't designed for constant disruption. By the time an issue surfaces, it has already snowballed, sending everyone into firefighting mode. Pelico exists to close the gap between production plans and the daily reality on the factory floor.
We've built the manufacturing orchestration platform trusted by the world's most complex industrial operations : companies like Airbus, Boeing, Safran, Eaton, and Cartier. Our AI connects fragmented supply chain, production, and quality data into a single live operational picture — then puts AI agents to work anticipating disruptions, simulating recovery options, and keeping every team aligned before small problems become expensive ones.
Founded in 2019 and backed by General Catalyst, 83North, and Serena, we've raised $72M and are growing fast — 300% year-over-year revenue growth, deployed in 15+ countries, and supporting factories worldwide. We're headquartered in Paris, with offices in Miami, London and Amsterdam, and we're just getting started.
This is a rare chance to join a company that's redefining an industry that hasn't been disrupted in decades — from the inside.
About the Role
As SecOps Lead, you'll own the operational effectiveness of Pelico's security monitoring, incident response, and vulnerability management capabilities. You'll turn security alerts and findings into actionable investigations, prioritized remediation, and measurable risk reduction — building the security operations foundation needed to protect our platform, support enterprise customers, and enable future regulated deployments.
This is a hands-on technical leadership role. You'll work closely with the CISO, Engineering, IT, and external security partners to build reliable, scalable security operations without creating unnecessary friction for product development and delivery.
What You'll Do
- Own security monitoring, detection, and incident response. Implement and operate SIEM and SOAR capabilities alongside our managed Security Operations Center (SOC). Ensure reliable telemetry across cloud, application, and identity environments; build and tune detections for account compromise, privilege escalation, suspicious cloud activity, and data exfiltration; and establish dependable 24/7 monitoring and escalation processes.
- Lead security investigations and response readiness. Develop incident response playbooks and automate enrichment, triage, and repeatable response actions. Lead technical investigations with Engineering, IT, and external providers, establish appropriate approval gates for disruptive actions, exercise response plans, and translate lessons learned into practical improvements.