Remote SOC Engineer - Build Our Security Operations Center

OpenKrill; United States; À distance; USD 110 000 - 150 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Discretionary bonus

25 days annual leave

Fully remote working

International scale-up

Résumé du poste

Payter is building a Security Operations Centre from the ground up. We seek two SOC Engineers to monitor cloud security, design detection rules and lead first-response incidents in a fully remote, globally-facing role.

You will work with DevOps and security teams to ensure controls are in place, runbooks are effective, and PCI compliance evidence is produced for audits. This is a high-impact, regulated environment.

Qualifications

• Hands-on experience in a SOC, security engineering or incident response role.
• Strong knowledge of Google Cloud Platform security and Google Workspace security.
• Experience with SIEM platforms and writing detection queries.
• Knowledge of PCI DSS and audit evidence in regulated environments.
• Understanding of cloud architecture, Linux and containerisation.
• Scripting skills (Python, Go or Bash) and Terraform are a plus.

Responsabilités

• Monitor, triage and investigate security alerts across Google Cloud Platform, Google Workspace, and our other cloud services.
• Design, build and tune detection rules, dashboards and alerting that give the business clear, real-time visibility of its security posture.
• Define and carry out daily, monthly and quarterly security checks, including log reviews, access recertifications, vulnerability scans, configuration drift and segmentation testing.
• Produce audit-ready evidence for our PCI compliance programme (DSS, P2PE, PIN and PTS) and support our compliance assessments.
• Lead first response to security incidents: contain threats, preserve evidence and drive remediation through to closure.
• Coordinate penetration tests and red team exercises and use the findings to strengthen our detection capabilities.
• Partner with the Lead DevOps Engineer, DevOps Engineers and Corporate IT Services to make sure security controls are in place, working and not bypassed.
• Help shape our SOC tooling, runbooks, automation and KPIs as the function grows.
• Take part in an out-of-hours on-call rota to respond to security incidents

Connaissances

SOC operations

GCP security

SIEM

PCI DSS

Cloud architecture

Linux

Containerization

Scripting

Terraform

Threat hunting

Communication

Outils

Google SecOps

SIEM platforms

Description du poste

Payter is building a Security Operations Centre from the ground up. We seek two SOC Engineers to monitor cloud security, design detection rules and lead first-response incidents in a fully remote, globally-facing role.

You will work with DevOps and security teams to ensure controls are in place, runbooks are effective, and PCI compliance evidence is produced for audits. This is a high-impact, regulated environment.