Remote Security Engineer: Cloud & PCI DSS Lead

EXPANSEFT INC; Westbury South (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

ExpanseFT Inc. is a payment-processing company building a cloud-native platform with PCI DSS obligations. This role leads day-to-day security operations, owns evidence trails, and coordinates audits. You’ll triage alerts, run vulnerability cycles, and own the PCI DSS evidence program from the ground up.

You will work on a modern hybrid security stack across AWS and Azure, with cloud SIEM, EDR, and endpoint protection. Remote but NY-based with on-site visits to Long Island data center as needed.

Qualifications

• Experience in Security Operations or Security Engineering in regulated environments (payments/finance/healthcare).
• Hands-on with AWS security services in multi-account setups (Security Hub, GuardDuty, Inspector, IAM).
• Proficient in cloud SIEM and writing/tuning analytics rules (KQL or equivalent).
• Experience administering an EDR platform (e.g., SentinelOne, Defender for Endpoint, CrowdStrike).
• Vulnerability-management lifecycle experience with SLAs and remediation tracking.
• Solid knowledge of PCI DSS v4.0 requirements and related controls.

Responsibilities

• Triage and investigate alerts across cloud SIEM, XDR, EDR, and cloud-security-posture tooling.
• Own vulnerability lifecycle: scans, triage, remediation tracking, evidence.
• Run access reviews across identity providers and provisioning/deprovisioning workflows.
• Lead incident response as primary responder with containment, forensics, and post-incident review.

Skills

Security Operations

AWS Security

Cloud SIEM

EDR

Vulnerability Management

PCI DSS

Scripting

Communication

Tools

SentinelOne

Defender for Endpoint

CrowdStrike

Prowler

Job description

ExpanseFT Inc. is a payment-processing company building a cloud-native platform with PCI DSS obligations. This role leads day-to-day security operations, owns evidence trails, and coordinates audits. You’ll triage alerts, run vulnerability cycles, and own the PCI DSS evidence program from the ground up.

You will work on a modern hybrid security stack across AWS and Azure, with cloud SIEM, EDR, and endpoint protection. Remote but NY-based with on-site visits to Long Island data center as needed.