IT Security Engineer

atRISKRemote

Ukraine Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted 1 day ago

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Design and implement security measures throughout AWS infrastructure, encompassing access management, network segmentation, data protection, secrets management, and encryption key management.

• Safeguard the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency platforms.

• Implement and uphold PCI DSS technical requirements, which include defining the scope of the cardholder data environment (CDE), access controls, network segmentation, logging, and protecting cardholder data.

• Perform security assessments of system architecture and infrastructure modifications, conduct threat modeling, and assist engineering teams in mitigating risks prior to production deployment.

• Incorporate security checks into CI/CD pipelines, covering vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning.

• Strengthen security monitoring, enhance threat detection capabilities, and refine incident response procedures.

• Oversee vulnerability remediation and system hardening efforts, collaborating closely with service owners to ensure effective resolution of security issues.

⛳️ Requirements

• Demonstrated hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer.

• Extensive experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub.

• Familiarity with PCI DSS requirements and practical experience in implementing security controls or preparing payment infrastructure for compliance audits.

• Comprehension of payment system architecture, sensitive data flows, and security risks linked to third-party integrations.

• Knowledge of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC.

• Solid understanding of Linux, network security, TLS, access management, and the principle of least privilege.

• Awareness of OWASP Top 10 and API security, encompassing authentication, authorization, webhook protection, and prevention of replay attacks.

• Experience in automating security tasks using Python or Bash and working with Infrastructure as Code (IaC).

• Capability to independently identify security risks, implement solutions, and assess their effectiveness.

• AWS Security, CISSP, CCSP, or similar security certifications will be regarded as a plus.