Sobre este puesto de Senior IT Security Specialist en Veo
Veo is an AI-powered sports camera and analysis ecosystem built for one job: turning what happens on a pitch into proof. Capture, viewing, data and analytics, sharing- all in one system, all pointed at the same thing.
That's bigger than football. Every player, on every pitch, gets access to the kind of proof only the top academies used to keep for themselves. It's the future we're building.
Every youth match still has a moment nobody saw. A run that won the game, underneath everyone's radar. A kid written off before anyone actually checked. We exist to close that gap, one match at a time.
One camera on any pitch feeds an AI that tracks every player and the ball for the whole game, turning what happened into evidence instead of somebody's opinion.
That's the actual job here. Not shipping features. Building the system that gives proof to someone who used to rely on a hunch.
If you've ever watched a match and wondered who else saw what you saw, you already know why this matters.
We're looking for people who want to build that future with us.
The Opportunity
Veo runs on a fast-growing estate of devices, SaaS tools and offices across Copenhagen, Berlin and Miami. As the first operational IT security hire, you'll own the security of that environment: the devices our people use, the identities and access that connect them to our tools, and how we respond when something goes wrong.
This isn't a "follow the runbook" role. You'll sit in our IT team, assess where we are today, set the direction, and build the processes and tooling that keep Veo secure as we scale.
What You Will Do
You'll be hands-on across endpoint, identity, and operational security, and you'll be the go-to person for IT security across the business.
Own endpoint security across our macOS, Windows, Linux, iOS and Android devices, including EDR, MDM, patching, encryption and hardening baselines
Define and enforce our BYOD approach, using conditional access, device compliance checks and data separation so people can work flexibly without putting company data at risk
Run SSO, SCIM and MFA across our SaaS applications, and own onboarding and offboarding so access is granted and removed on time, every time.
Build identity governance, including regular access reviews, least-privilege access, and clear ownership of who has access to what
Lead IT incident response from detection and triage through containment, investigation and post-incident review, and keep our playbooks sharp
Monitor and respond to CVEs affecting our endpoints and SaaS tools, assessing risk, prioritizing fixes, and making sure patches are applied on time
Plan and run phishing simulations and security awareness training that change behavior, and measure the results
Drive day-to-day operational security, including alert monitoring, vulnerability management, SaaS vendor assessments, and keeping policies and runbooks current
Lead our IT security work for GDPR and NIS2, from implementing controls to maintaining documentation and evidence, together with Legal and GRC
Help lay the groundwork for future SOC 2 and ISO 27001 certification
Own our office security systems, such as CCTV and door access, working with our Office Manager
What You Could Bring
You've likely spent several years in IT security or security operations, ideally in a growing tech company, and you're comfortable being the person who owns security end-to-end.
That experience tends to show up in several of the following:
Endpoint and device security: hands-on with EDR and MDM tools such as CrowdStrike, SentinelOne, Hexnode, Intune or Kandji, across desktop and mobile, including securing BYOD environments
Identity and access: deep experience with Google Workspace and Entra rolling out SSO, SCIM, and MFA, and running joiner/mover/leaver processes and access reviews.
Incident response: you've led real incidents end-to-end and can stay calm and clear under pressure.
Vulnerability management: you track CVEs, judge real-world risk quickly, and get fixes rolled out.
Security culture: you've run phishing awareness programs and can explain risk in plain language to people who aren't technical.
Compliance in practice: you've applied GDPR and NIS2 requirements in an operational role. Experience with SOC 2 or ISO 27001 is a strong advantage as we work towards them.
Linux: administration and hardening experience is highly valued.
Nice To Have
How We Work
You'll be part of the IT team within Administration & Finance and work most closely with GRC, the Security Enablement Team, and Legal. We're pragmatic; we prioritize what matters most, and we favor simple solutions that help people work securely without slowing them down.
If you match on several of these areas but not all, apply anyway. We care more about how you think and what you'll own than about ticking every box.
