Security Operations Engineer - PCI DSS

2 hours, 29 minutes ago
Contract
Senior
DevOps and Infrastructure
teamified.com

teamified.com

teamified.com specializes in enhancing the rental experience for property owners by showcasing their businesses and maximizing brand loyalty, ultimately helping them increase rental revenue while reducing stress.

Hotels, Restaurants & Leisure
Founded 2020

Description

  • Implement and verify PCI DSS controls across access management, secure configuration, logging, monitoring, vulnerability management, encryption, and secure development.
  • Deploy and validate Wazuh SIEM and host intrusion detection capabilities, including log coverage, detection rules, file integrity monitoring, retention, and compliance evidence.
  • Define daily alert triage and security response procedures.
  • Complete SAQ D for Service Providers and assemble the supporting evidence set.
  • Maintain network diagrams, cardholder dataflow documentation, scoping and segmentation records, policies, and operating procedures.
  • Manage quarterly external vulnerability scanning and coordinate remediation to passing results.
  • Coordinate penetration testing, remediation, and retesting with an independent provider.
  • Maintain third-party service provider due diligence, including partner AOCs and shared-responsibility documentation.
  • Own the compliance delivery plan, dependencies, risks, schedule, and weekly leadership reporting.
  • Document repeatable operational routines and strengthen change-management practices for ongoing compliance.

Requirements

  • Demonstrable experience leading organisations through PCI DSS compliance, preferably multiple times and including PCI DSS v4.x.
  • Working knowledge of PCI DSS v4.0.1, including changes from v3.2.1 and requirements mandatory from March 31, 2025.
  • Direct experience completing SAQ D or preparing evidence for a Report on Compliance.
  • Hands-on AWS security engineering across IAM, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code.
  • Experience configuring SIEM or centralised logging platforms, including onboarding, parsing, correlation rules, file integrity monitoring, retention, and tuning.
  • Direct Wazuh experience is preferred; OSSEC, Elastic Security, Graylog, or Security Onion experience is acceptable.
  • Practical experience with vulnerability management, monitoring, access management, and secure configuration baselines.
  • Ability to independently plan, track, report, and escalate work without a project manager.
  • Excellent written English and strong compliance documentation skills.
  • Payments or regulated financial services experience, PCI certifications, Jira administration, or ISO 27001/SOC 2 familiarity are preferred.

Benefits

  • Flexible working hours and location.
  • Access to online learning platforms and a professional development budget.
  • Collaborative, no-silos working environment.
  • Team lunches, social events, and opportunities for creative input.
  • Leave benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cybersecurity & Software Engineering Specialist (AI Projects)

Gramian Consultancy Group Professional Services

Gramian Consultancy is seeking remote Cybersecurity and Software Engineering Specialists to debug code, identify vulnerabilities, improve backend systems, and provide technical insights for an AI training project.

C++ Cybersecurity Go Java Penetration Testing Python Rust TypeScript
2 hours, 29 minutes ago

Senior Microsoft Purview Engineer

New Era Technology US 1K-5K IT Services

New Era Technology is seeking a hands-on Senior Microsoft Purview Engineer to operate and mature enterprise data protection capabilities in a live production environment through a 6–12 month staff augmentation engagement, with possible full-time conversion.

3 days ago

Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Fixed-term contract)

Form3 251-1K Diversified Financial Services

Form3 is hiring a Senior Cloud Security Engineer on a 12-month fixed-term contract to deliver cloud security, resilience, and governance improvements across its cloud-native payments platform.

AWS CI/CD Kubernetes Terraform
2 weeks ago

Senior Identity Security Engineer (Remote - LATAM)

Atmosera 51-250 IT Services

Atmosera is seeking a Senior Identity Security Engineer to modernize and secure hybrid Active Directory and Microsoft Entra ID environments while advancing identity governance and Zero Trust initiatives for clients.

Active Directory Azure OAuth PowerShell SAML
3 weeks, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers