IT Security Engineer

Requirements:

• Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;

• Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;

• Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;

• Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;

• Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;

• Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege;

• Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention;

• Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC);

• Ability to independently identify security risks, implement solutions, and validate their effectiveness;

• AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus.

Responsibilities:

• Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;

• Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;

• Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;

• Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;

• Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;

• Enhance security monitoring, threat detection capabilities, and incident response procedures;

• Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved.