Demonstrates expertise in PCI DSS compliance, including hands-on experience with AWS security engineering and centralized logging platforms. Capable of managing vulnerability assessments, implementing technical controls, and documenting operational procedures effectively.

Highest-signal resume keywords

PCI DSS ComplianceAWS Security EngineeringCentralized Logging PlatformsVulnerability ManagementSAQ D Completion

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Implement and verify technical controls across the cardholder data environment, including access management, secure configuration, logging and monitoring, vulnerability management, encryption and key management, and secure development practices.
Deliver PCI DSS v4.0.1-compliant logging and monitoring, including centralised audit-log collection, log protection, retention, automated review, time synchronisation, critical-file change detection, and failure alerting.
Work with the DevOps engineer to roll out Wazuh; define log sources and coverage, develop and tune detection and correlation rules, configure file-integrity monitoring and retention, validate compliance, and produce evidence.
Define the client's alert triage and response routine.
Complete SAQ D for Service Providers and assemble supporting evidence.
Maintain network and cardholder dataflow diagrams, scoping and segmentation documentation, policies, and operating procedures.
Engage and manage an Approved Scanning Vendor for quarterly external vulnerability scanning and drive remediation.
Scope and coordinate penetration testing with an independent qualified provider; manage remediation and retesting.
Maintain third-party service-provider due diligence, including partner AOC collection and shared-responsibility documentation.
Own the delivery plan, dependencies, risk log, and weekly leadership reporting.
Strengthen change-management practices so changes are raised, approved, tested, and evidenced consistently.
Document repeatable operational routines for the client team after the engagement ends.

Requirements

What you’ll need

Demonstrable experience taking an organisation through PCI DSS compliance, ideally more than once and ideally including v4.x.
Working knowledge of PCI DSS v4.0.1, including the changes from v3.2.1 and the requirements mandatory from 31 March 2025.
Direct experience completing SAQ D, or preparing evidence for a Report on Compliance.
Hands-on AWS security engineering: IAM policy design, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code. Equivalent depth in another major public cloud will be considered where the candidate can demonstrate transferable design judgement.
Hands-on experience with SIEM or centralised log platforms in a compliance context — log source onboarding, parsing and normalisation, correlation and alert rule development, file integrity monitoring, retention configuration, and tuning to reduce false positives. Direct Wazuh experience is a strong advantage; equivalent open-source stacks (OSSEC, Elastic Security, Graylog, Security Onion) are acceptable. Candidates should be able to name the platforms they have worked with and describe what they configured, not only what they monitored.
Practical experience in vulnerability management, logging and monitoring, access management and secure configuration baselines.
Ability to independently plan, track, report and escalate. No project manager will be assigned.
Excellent written English.
Willingness to record a control as not in place where that is the accurate position.
Desirable: Payments, fintech or regulated financial services background.
Desirable: Understanding of the acquirer, processor and card scheme landscape.
Desirable: Experience of Level 1 service provider validation, or of taking an organisation from self-assessment to QSA-led assessment.
Desirable: PCIP, ISA, CISSP, CISM or equivalent certification.
Desirable: Jira administration and workflow configuration.
Desirable: Familiarity with ISO 27001 or SOC 2.

Benefits

Comp & perks

Flexibility in work hours and location, with a focus on managing energy rather than time.
Access to online learning platforms and a budget for professional development
A collaborative, no-silos environment, encouraging learning and growth across teams
A dynamic social culture with team lunches, social events, and opportunities for creative input
Leave Benefits

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Access ManagementSecure ConfigurationLogging And MonitoringVulnerability ManagementEncryption And Key ManagementInfrastructure-As-CodeFile Integrity MonitoringAudit LoggingDetection And Correlation RulesChange Management

Soft Skills

Excellent Written EnglishIndependent PlanningTracking And Reporting

Tools & Technologies

WazuhSIEMAWSOSSECElastic SecurityGraylogSecurity OnionJira

Certifications & Qualifications

PCIPISACISSPCISM

Industry Keywords

PaymentsFintechRegulated Financial ServicesISO 27001SOC 2