Security Operations Engineer - PCI DSS
Core
Run the annual PCI DSS v4.0.1 compliance cycle for a cloud-hosted payment platform, implementing technical controls and assembling evidence for external assessment.
Role type
Senior IC security operations engineer (PCI DSS compliance)
Builds
Compliance evidence sets, technical control implementations, and operational routines for a payments platform
Domain
Payments / Fintech / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
PCI DSS v4.0.1 expertise, SAQ D completion, AWS security engineering, SIEM configuration, vulnerability management, secure configuration baselines, change management, project planning
Preferred skills
Payments/fintech background, Level 1 validation experience, PCIP/ISA/CISSP/CISM certification, Jira administration, ISO 27001/SOC 2 familiarity
Technologies
AWS, Wazuh, OSSEC, Elastic Security, Graylog, Security Onion
Responsibilities
Implement and verify technical controls (access management, encryption, logging, vulnerability management); Configure SIEM and host intrusion detection platforms; Complete SAQ D and assemble evidence; Manage external scanning and penetration testing; Maintain compliance documentation and third-party due diligence; Define alert triage routines; Plan and report on the compliance delivery cycle
Seniority
Senior, hands-on IC