Security Operations Engineer – PCI DSS

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Execute and validate technical controls within the cardholder data environment, encompassing access management, secure configurations, logging and monitoring, vulnerability management, encryption and key management, as well as secure development practices.

• Provide logging and monitoring requirements for PCI DSS v4.0.1, which includes centralized audit-log collection, log protection, retention, automated review, time synchronization, critical-file change detection, and failure alerts.

• Collaborate with the client’s DevOps engineer for the deployment of Wazuh, taking ownership of compliance outcomes, necessary log-source coverage, detection and correlation rules, file integrity monitoring, retention, validation, and evidence.

• Establish the daily alert triage and response routine for the client team.

• Complete SAQ D for Service Providers and compile supporting documentation.

• Maintain network and cardholder data flow diagrams, scoping and segmentation documents, policies, and operating procedures.

• Engage and oversee an Approved Scanning Vendor for quarterly external vulnerability scans, driving remediation to achieve passing scans.

• Define the scope and coordinate penetration testing with a certified independent provider; manage remediation and retesting efforts.

• Uphold third-party service provider due diligence, partner AOC collection, and shared responsibility documentation.

• Take ownership of the delivery plan, scheduling, dependencies, risk log, and weekly leadership reporting.

• Enhance change-management practices to ensure that changes are raised, approved, tested, and documented consistently.

• Document repeatable operational routines for log review, access review, scan cadence, and change approval following the engagement conclusion.

⛳️ Requirements

• Proven experience guiding an organization through PCI DSS compliance, preferably more than once and ideally involving v4.x.

• Familiarity with PCI DSS v4.0.1, including changes from v3.2.1 and the mandatory requirements effective from 31 March 2025.

• Direct experience in completing SAQ D or preparing evidence for a Report on Compliance.

• Practical experience in AWS security engineering: IAM policy design, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code; comparable depth in another major public cloud will be considered with applicable design judgement.

• Hands-on experience with SIEM or centralized log platforms within a compliance framework, including log source onboarding, parsing and normalization, correlation and alert rule development, file integrity monitoring, retention configuration, and fine-tuning to minimize false positives.

• Ability to identify platforms utilized and articulate configurations, not just monitoring.

• Solid experience in vulnerability management, logging and monitoring, access management, and secure configuration baselines.

• Capability to independently plan, track, report, and escalate; without a project manager assigned.

• Exceptional written English skills.

• Willingness to accurately document a control as not in place when applicable.

• Desirable: Background in payments, fintech, or regulated financial services.

• Desirable: Understanding of the acquirer, processor, and card scheme landscape.

• Desirable: Level 1 service provider validation or experience transitioning an organization from self-assessment to QSA-led assessment.

• Desirable: PCIP, ISA, CISSP, CISM, or equivalent certification.

• Desirable: Jira administration and workflow configuration experience.

• Desirable: Familiarity with ISO 27001 or SOC 2.

🏝️ Benefits

• Flexibility in work hours and location, emphasizing energy management over time management.

• Access to online learning platforms along with a budget allocated for professional development.

• A collaborative environment free of silos, fostering learning and growth across teams.

• A vibrant social culture featuring team lunches, social events, and opportunities for creative contributions.

• Leave benefits.