Security Operations Engineer – PCI DSS

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Teamified

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2021

💼 Consulting

👥 HR Tech

🎯 Recruiter

Consulting • HR Tech • Recruitment

Teamified is a global talent powerhouse that specializes in connecting businesses to offshore talent. They offer a comprehensive platform that simplifies the hiring process by providing access to a diverse range of skilled professionals from multiple industries. With a focus on data security and a people-first approach, Teamified aims to reduce hiring times and costs while ensuring high-quality talent matches for organizations.

📋 Description

• Implement and verify technical controls across the cardholder data environment, including access management, secure configuration, logging and monitoring, vulnerability management, encryption and key management, and secure development practices. • Deliver PCI DSS v4.0.1-compliant logging and monitoring, including centralised audit-log collection, log protection, retention, automated review, time synchronisation, critical-file change detection, and security-control failure alerting. • Work with the DevOps engineer on rolling out Wazuh; define log sources and coverage, develop and tune detection and correlation rules, configure file-integrity monitoring and retention, validate compliance, and produce evidence. • Define the client team's alert triage and response routine. • Complete SAQ D for Service Providers and assemble supporting evidence. • Maintain network and cardholder dataflow diagrams, scoping and segmentation documentation, policies, and operating procedures. • Engage and manage an Approved Scanning Vendor for quarterly external vulnerability scanning and drive remediation to passing scans. • Scope and coordinate penetration testing with a qualified independent provider; manage remediation and retesting. • Maintain third-party service-provider due diligence, including partner AOC collection and shared-responsibility documentation. • Own the delivery plan, schedule, dependencies, risk log, and weekly leadership reporting. • Strengthen change-management practices so changes are raised, approved, tested, and evidenced consistently. • Document repeatable operational routines for the client team after the engagement ends.

🎯 Requirements

• Demonstrable experience taking an organisation through PCI DSS compliance, ideally more than once and ideally including v4.x. • Working knowledge of PCI DSS v4.0.1, including the changes from v3.2.1 and the requirements mandatory from 31 March 2025. • Direct experience completing SAQ D, or preparing evidence for a Report on Compliance. • Hands-on AWS security engineering: IAM policy design, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code. Equivalent depth in another major public cloud will be considered where the candidate can demonstrate transferable design judgement. • Hands-on experience with SIEM or centralised log platforms in a compliance context — log source onboarding, parsing and normalisation, correlation and alert rule development, file integrity monitoring, retention configuration, and tuning to reduce false positives. Direct Wazuh experience is a strong advantage; equivalent open-source stacks (OSSEC, Elastic Security, Graylog, Security Onion) are acceptable. Candidates should be able to name the platforms they have worked with and describe what they configured, not only what they monitored. • Practical experience in vulnerability management, logging and monitoring, access management and secure configuration baselines. • Ability to independently plan, track, report and escalate. No project manager will be assigned. • Excellent written English. • Willingness to record a control as not in place where that is the accurate position. • Payments, fintech or regulated financial services background. • Understanding of the acquirer, processor and card scheme landscape. • Experience of Level 1 service provider validation, or of taking an organisation from self-assessment to QSA-led assessment. • PCIP, ISA, CISSP, CISM or equivalent certification. • Jira administration and workflow configuration. • Familiarity with ISO 27001 or SOC 2.

🏖️ Benefits

• Flexibility in work hours and location, with a focus on managing energy rather than time. • Access to online learning platforms and a budget for professional development • A collaborative, no-silos environment, encouraging learning and growth across teams • A dynamic social culture with team lunches, social events, and opportunities for creative input • Health insurance • Leave Benefits • Provident Fund • Gratuity