Security Operations Engineer - PCI DSS

10 hours, 29 minutes ago
Contract
Senior
DevOps and Infrastructure
teamified.com

teamified.com

teamified.com specializes in enhancing the rental experience for property owners by showcasing their businesses and maximizing brand loyalty, ultimately helping them increase rental revenue while reducing stress.

Hotels, Restaurants & Leisure
Founded 2020

Description

  • Implement and verify PCI DSS controls across access management, secure configuration, logging, monitoring, vulnerability management, encryption, and secure development.
  • Deploy and validate Wazuh SIEM and host intrusion detection capabilities, including log coverage, detection rules, file integrity monitoring, retention, and compliance evidence.
  • Define daily alert triage and security response procedures.
  • Complete SAQ D for Service Providers and assemble the supporting evidence set.
  • Maintain network diagrams, cardholder dataflow documentation, scoping and segmentation records, policies, and operating procedures.
  • Manage quarterly external vulnerability scanning and coordinate remediation to passing results.
  • Coordinate penetration testing, remediation, and retesting with an independent provider.
  • Maintain third-party service provider due diligence, including partner AOCs and shared-responsibility documentation.
  • Own the compliance delivery plan, dependencies, risks, schedule, and weekly leadership reporting.
  • Document repeatable operational routines and strengthen change-management practices for ongoing compliance.

Requirements

  • Demonstrable experience leading organisations through PCI DSS compliance, preferably multiple times and including PCI DSS v4.x.
  • Working knowledge of PCI DSS v4.0.1, including changes from v3.2.1 and requirements mandatory from March 31, 2025.
  • Direct experience completing SAQ D or preparing evidence for a Report on Compliance.
  • Hands-on AWS security engineering across IAM, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code.
  • Experience configuring SIEM or centralised logging platforms, including onboarding, parsing, correlation rules, file integrity monitoring, retention, and tuning.
  • Direct Wazuh experience is preferred; OSSEC, Elastic Security, Graylog, or Security Onion experience is acceptable.
  • Practical experience with vulnerability management, monitoring, access management, and secure configuration baselines.
  • Ability to independently plan, track, report, and escalate work without a project manager.
  • Excellent written English and strong compliance documentation skills.
  • Payments or regulated financial services experience, PCI certifications, Jira administration, or ISO 27001/SOC 2 familiarity are preferred.

Benefits

  • Flexible working hours and location.
  • Access to online learning platforms and a professional development budget.
  • Collaborative, no-silos working environment.
  • Team lunches, social events, and opportunities for creative input.
  • Leave benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DevSecOps Engineer

Sparksoft 51-250 Internet Software & Services

Sparksoft is hiring a DevOps and Cloud Infrastructure professional to support government clients by managing AWS infrastructure, deployment pipelines, configuration controls, and software release activities.

Agile AWS CI/CD Git GitHub Jenkins SonarQube SVN
9 hours, 14 minutes ago

Staff Information Security Engineer - AI First

Rithum Internet Software & Services

Rithum is hiring a Staff AI-First Information Security Engineer to secure its AI-powered products and workforce by building automated controls, guardrails, and workflows across cloud and enterprise environments.

AWS Cybersecurity Python SIEM Terraform
9 hours, 59 minutes ago

Cybersecurity & Software Engineering Specialist (AI Projects)

Gramian Consultancy Group Professional Services

Gramian Consultancy is seeking remote Cybersecurity and Software Engineering Specialists to debug code, identify vulnerabilities, improve backend systems, and provide technical insights for an AI training project.

C++ Cybersecurity Go Java Penetration Testing Python Rust TypeScript
10 hours, 29 minutes ago

Senior Security Engineer Cryptography

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote Senior Security Engineer for its Cryptography practice to assess and strengthen high-assurance cryptographic software and systems for clients across technology, finance, defense, and blockchain.

C C++ Cybersecurity Git Go Rust
10 hours, 29 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers