Senior IT Security Specialist

The Opportunity

Veo runs on a fast-growing estate of devices, SaaS tools and offices across Copenhagen, Berlin and Miami. As the first operational IT security hire, you'll own the security of that environment: the devices our people use, the identities and access that connect them to our tools, and how we respond when something goes wrong.

This isn't a "follow the runbook" role. You'll sit in our IT team, assess where we are today, set the direction, and build the processes and tooling that keep Veo secure as we scale.

What You Will Do

You'll be hands-on across endpoint, identity, and operational security, and you'll be the go-to person for IT security across the business.

• Own endpoint security across our macOS, Windows, Linux, iOS and Android devices, including EDR, MDM, patching, encryption and hardening baselines

• Define and enforce our BYOD approach, using conditional access, device compliance checks and data separation so people can work flexibly without putting company data at risk

• Run SSO, SCIM and MFA across our SaaS applications, and own onboarding and offboarding so access is granted and removed on time, every time.

• Build identity governance, including regular access reviews, least-privilege access, and clear ownership of who has access to what

• Lead IT incident response from detection and triage through containment, investigation and post-incident review, and keep our playbooks sharp

• Monitor and respond to CVEs affecting our endpoints and SaaS tools, assessing risk, prioritizing fixes, and making sure patches are applied on time

• Plan and run phishing simulations and security awareness training that change behavior, and measure the results

• Drive day-to-day operational security, including alert monitoring, vulnerability management, SaaS vendor assessments, and keeping policies and runbooks current

• Lead our IT security work for GDPR and NIS2, from implementing controls to maintaining documentation and evidence, together with Legal and GRC

• Help lay the groundwork for future SOC 2 and ISO 27001 certification

• Own our office security systems, such as CCTV and door access, working with our Office Manager

What You Could Bring

You've likely spent several years in IT security or security operations, ideally in a growing tech company, and you're comfortable being the person who owns security end-to-end.

That experience tends to show up in several of the following:

• Endpoint and device security: hands-on with EDR and MDM tools such as CrowdStrike, SentinelOne, Hexnode, Intune or Kandji, across desktop and mobile, including securing BYOD environments

• Identity and access: deep experience with Google Workspace and Entra rolling out SSO, SCIM, and MFA, and running joiner/mover/leaver processes and access reviews.

• Incident response: you've led real incidents end-to-end and can stay calm and clear under pressure.

• Vulnerability management: you track CVEs, judge real-world risk quickly, and get fixes rolled out.

• Security culture: you've run phishing awareness programs and can explain risk in plain language to people who aren't technical.

• Compliance in practice: you've applied GDPR and NIS2 requirements in an operational role. Experience with SOC 2 or ISO 27001 is a strong advantage as we work towards them.

• Linux: administration and hardening experience is highly valued.

Nice To Have

• Scripting and automation (Python, PowerShell, Bash)
• SIEM experience
• Certifications such as CISSP, CISM, OSCP, or GIAC