Security Operations Engineer II

As Security Operations Engineer II, you help secure Mollie’s fast-growing platform by leading operational security, incident response, and threat analytics. You’ll join a seasoned SecOps team to detect, investigate, and respond to security events, while building playbooks and automation to reduce risk. Your work directly strengthens our security posture and supports reliable service for thousands of businesses across Europe. This role offers hands-on impact, a collaborative environment, and opportunities to shape security practices at a scale across fintech.

• growth-focused culture
• regular feedback and performance reviews
• fair salary reviews
• internal mobility and opportunities to grow
• support for skill development

• Respond to security incidents and coordinate with internal and external stakeholders to minimize disruption
• Investigate and resolve security incidents following established procedures
• Develop and enhance incident response playbooks and runbooks for consistency
• Collaborate with Security Engineering to improve detection capabilities
• Proactively hunt for threats beyond current use cases
• Define monitoring scenarios and prototype rules based on threat intel
• Participate in incident response rotation and on-call procedures
• Deliver strategic reports and updates to reduce threat impact
• Create security reports, dashboards, and metrics to communicate posture
• Automate repetitive security tasks to improve efficiency and free time for strategic work
• Identify process optimization opportunities and implement changes with the team

• Experience in a fast-growing product company with ownership mindset
• Background in a Security Operations (SecOps) team (preferred
• Ability to work independently and collaborate with cross-functional teams
• Customer-centric, pragmatic, and risk-aware approach
• Solid understanding of security concepts, cyberattacks, risk management, and incident response
• Experience with SIEM and security automation tools (SOAR)
• Experience with Threat Intelligence, Threat Hunting, and EDR tools (e.g. Crowdstrike, Sysdig)
• DevOps/DevSecOps experience and methodologies
• Familiarity with regulatory frameworks (NIST, PCI DSS, GDPR, DORA)
• Experience with a 3 lines of defense model, auditors, and control management
• Familiarity with cloud platforms (GCP) and Linux/macOS, Kubernetes, Terraform, GitLab
• Experience scripting in Python

• Ownership mindset
• Cross-functional collaboration
• Pragmatic risk management
• SIEM and SOAR
• Threat Intelligence and Threat Hunting
• EDR tools (CrowdStrike, Sysdig)