Security Operations Engineer - PCI DSS

teamified; Philippines; Remote; PHP 1,402,000 - 3,365,000; Full time

Benefits offered by this job

Flexible hours

Online learning platform

Collaborative environment

Team lunches

Leave benefits

Job summary

Our client operates a cloud-hosted payment platform and validates against PCI DSS v4.0.1 as a Level 2 service provider. They seek an experienced security engineer for a three-month contract to drive the annual compliance cycle and evidence readiness.

The role is hands-on with programme ownership: implement controls, assemble and quality-check evidence, complete the SAQD for Service Providers, and partner with engineering and operations to ensure compliance delivery.

Qualifications

• Demonstrable experience taking an organisation through PCI DSS compliance, ideally multiple cycles.
• Hands-on AWS security engineering with IAM, VPC, logging and key management.
• Experience with SAQD for Service Providers and evidence preparation.
• Strong documentation and ability to produce audit-ready evidence.

Responsibilities

• Implement and verify technical controls across the cardholder data environment.
• Deliver logging and monitoring requirements for v4.0.1 standard.
• Collaborate with DevOps to roll out Wazuh SIEM and host IDS.
• Define alert triage, response routines, and runbooks for security events.
• Maintain third-party due diligence and manage remediation and retests.

Skills

PCI DSS compliance

AWS security engineering

SIEM/log management

Vulnerability management

Documentation & evidencing

Security controls implementation

Open-source SIEM (Wazuh)

Tools

Wazuh

SIEM platforms

OSSEC/ElasticSecurity/Graylog

Cloud security (AWS)

IaC tooling

Jira

Job description

Abouttheclient

Ourclientisaninnovativepaymentstechnologycompanytransformingthewaybusinessessend,receive,pay,andreconcileinvoices.Withastrongfocusonsimplifyingcomplexpaymentprocesses,theyprovideaseamlessbillingandpaymentsecosystemdesignedtogivebusinessesandtheircustomersgreaterflexibility,visibility,andcontrolovercashflow.

Byintegratingwithexistingaccountingplatformsandpaymentworkflows,ourclienthelpsreducemanualadministration,streamlinereconciliation,improvepaymentexperiences,andcreatemoreefficientandsecurefinancialprocesses.Theyarecommittedtoinnovationanddeliveringtechnologysolutionsthatmakepaymentssimpler,faster,andmorecustomer-focused.

Asthebusinesscontinuestogrow,theyareseekingtalentedprofessionalswhoarepassionateabouttechnology,payments,anddeliveringexceptionalcustomerexperiencestojointheirteam.

AboutTeamified

TeamifiedisatalentpartnerhelpingcompaniesbuildexceptionalremoteteamsacrossIT,software,product,anddigitalinnovation.Wecollaboratewithleadingenterprisesandfast-scalingtechbusinessesworldwidetohelpthemaccessworldclasstalentandaccelerategrowth.Withoperationsacrosstheglobeourmissionistomakebuildinghighperformingglobalteamssimple,fast,andcost-effective.Teamifiedhashundredsofclientswithmorethan200engineers,testers,productmanagers,designers,andtechnologyexpertsdeliveringimpactfulsolutionseveryday.

JobSummary:

Ourclientoperatesacloud-hostedpaymentplatformandvalidatesagainstPCIDSSv4.0.1asaLevel2serviceproviderviaSAQDforServiceProviders.Theyareseekinganexperiencedsecurityengineeronathree-monthcontracttoruntheannualcompliancecycletocompletion.

Thisisahands-onengineeringrolecombinedwithprogrammeownership.Thesuccessfulcandidatewillimplementtechnicalcontrolchanges,assembleandquality-checktheevidenceset,completetheself-assessmentquestionnaire,andpreparetheAttestationofComplianceforexecutivesign-off.Theywillworkalongsidetheclient'sexistingengineeringandoperationsteams.

Theevidenceanddocumentationproducedshouldbebuilttoastandardsuitableforexternalassessment,astheclientanticipatesmovingtoQSA-ledLevel1validationinafuturecycle.

Responsibilities:

• Implementandverifytechnicalcontrolsacrossthecardholderdataenvironment:accessmanagement,secureconfiguration,loggingandmonitoring,vulnerabilitymanagement,encryptionandkeymanagement,andsecuredevelopmentpractices.
• Delivertheloggingandmonitoringrequirementstothestandardv4.0.1expects:centralisedcollectionofauditlogsfromallin-scopesystemcomponents,protectionoflogsagainstalteration,twelve-monthretentionwiththreemonthsimmediatelyavailable,automatedmechanismsforlogreviewratherthanmanualinspection,timesynchronisation,changedetectiononcriticalfiles,andalertingonthefailureofcriticalsecuritycontrolsystems.
• Workalongsidetheclient'sDevOpsengineerontherolloutofanopen-sourceSIEMandhostintrusiondetectionplatform(Wazuh).TheDevOpsengineerownstheinfrastructurebuild;thisroleownsthecomplianceoutcome—definingrequiredlogsourcesandcoverage,developingandtuningdetectionandcorrelationrules,configuringfileintegritymonitoringandretentiontomeetthestandard,validatingthatthedeploymentactuallysatisfiestherequirements,andevidencingit.
• Definethealerttriageandresponseroutinetheclientteamwilloperatedaytoday.
• CompleteSAQDforServiceProvidersandassemblethesupportingevidenceset.
• Maintaincompliancedocumentation:networkandcardholderdataflowdiagrams,scopingandsegmentationdocumentation,policiesandoperatingprocedures.
• EngageandmanageanApprovedScanningVendorforquarterlyexternalvulnerabilityscanning;driveremediationtopassingscans.
• Scopeandco-ordinatepenetrationtestingwithaqualifiedindependentprovider;manageremediationandretest.
• Maintainthird-partyserviceproviderduediligence,includingpartnerAOCcollectionandsharedresponsibilitydocumentation.
• Ownthedeliveryplan:schedule,dependencies,risklog,andweeklyreportingtoleadership.
• Strengthenchangemanagementpracticesothatchangesareraised,approved,testedandevidencedconsistently.
• Documentrepeatableoperationalroutines(logreview,accessreview,scancadence,changeapproval)fortheclientteamtorunaftertheengagementends.

Requirements:

Essentialexperience

• DemonstrableexperiencetakinganorganisationthroughPCIDSScompliance,ideallymorethanonceandideallyincludingv4.x.
• WorkingknowledgeofPCIDSSv4.0.1,includingthechangesfromv3.2.1andtherequirementsmandatoryfrom31March2025.
• DirectexperiencecompletingSAQD,orpreparingevidenceforaReportonCompliance.
• Hands-onAWSsecurityengineering:IAMpolicydesign,VPCandnetworksegmentation,auditlogging,secretsandkeymanagement,andinfrastructure-as-code.Equivalentdepthinanothermajorpubliccloudwillbeconsideredwherethecandidatecandemonstratetransferabledesignjudgement.
• Hands-onexperiencewithSIEMorcentralisedlogplatformsinacompliancecontext—logsourceonboarding,parsingandnormalisation,correlationandalertruledevelopment,fileintegritymonitoring,retentionconfiguration,andtuningtoreducefalsepositives.DirectWazuhexperienceisastrongadvantage;equivalentopen-sourcestacks(OSSEC,ElasticSecurity,Graylog,SecurityOnion)areacceptable.Candidatesshouldbeabletonametheplatformstheyhaveworkedwithanddescribewhattheyconfigure,notonlywhattheymonitored.
• Practicalexperienceinvulnerabilitymanagement,loggingandmonitoring,accessmanagementandsecureconfigurationbaselines.
• Abilitytoindependentlyplan,track,reportandescalate.Noprojectmanagerwillbeassigned.
• ExcellentwrittenEnglish.Asignificantportionofthisroleisdocumentationandevidencethatmustbereadandacceptedbyothers.
• Willingnesstorecordacontrolasnotinplacewherethatistheaccurateposition.

Desirable

• Payments,fintechorregulatedfinancialservicesbackground.
• Understandingoftheacquirer,processorandcardschemelandscape.
• ExperienceofLevel1serviceprovidervalidation,oroftakinganorganisationfromself-assessmenttoQSA-ledassessment.
• PCIP,ISA,CISSP,CISMorequivalentcertification.
• Jiraadministrationandworkflowconfiguration.
• FamiliaritywithISO27001orSOC2.

Benefits:

• Flexibilityinworkhoursandlocation,withafocusonmanagingenergyratherthantime.
• Accesstoonlinelearningplatformsandabudgetforprofessionaldevelopment
• Acollaborative,no-silosenvironment,encouraginglearningandgrowthacrossteams
• Adynamicsocialculturewithteamlunches,socialevents,andopportunitiesforcreativeinput
• LeaveBenefits