Remote Security Operations Engineer: PCI DSS & SIEM Lead

teamified; Philippines; Remote; PHP 1,402,000 - 3,365,000; Full time

Benefits offered by this job

Flexible hours

Online learning platform

Collaborative environment

Team lunches

Leave benefits

Job summary

Our client operates a cloud-hosted payment platform and validates against PCI DSS v4.0.1 as a Level 2 service provider. They seek an experienced security engineer for a three-month contract to drive the annual compliance cycle and evidence readiness.

The role is hands-on with programme ownership: implement controls, assemble and quality-check evidence, complete the SAQD for Service Providers, and partner with engineering and operations to ensure compliance delivery.

Qualifications

• Demonstrable experience taking an organisation through PCI DSS compliance, ideally multiple cycles.
• Hands-on AWS security engineering with IAM, VPC, logging and key management.
• Experience with SAQD for Service Providers and evidence preparation.
• Strong documentation and ability to produce audit-ready evidence.

Responsibilities

• Implement and verify technical controls across the cardholder data environment.
• Deliver logging and monitoring requirements for v4.0.1 standard.
• Collaborate with DevOps to roll out Wazuh SIEM and host IDS.
• Define alert triage, response routines, and runbooks for security events.
• Maintain third-party due diligence and manage remediation and retests.

Skills

PCI DSS compliance

AWS security engineering

SIEM/log management

Vulnerability management

Documentation & evidencing

Security controls implementation

Open-source SIEM (Wazuh)

Tools

Wazuh

SIEM platforms

OSSEC/ElasticSecurity/Graylog

Cloud security (AWS)

IaC tooling

Jira

Job description

Our client operates a cloud-hosted payment platform and validates against PCI DSS v4.0.1 as a Level 2 service provider. They seek an experienced security engineer for a three-month contract to drive the annual compliance cycle and evidence readiness.

The role is hands-on with programme ownership: implement controls, assemble and quality-check evidence, complete the SAQD for Service Providers, and partner with engineering and operations to ensure compliance delivery.