Security Subject Matter Expert

Remote Jobs; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

Remote Jobs is seeking a Security Subject Matter Expert to lead MasrPay's information security program for fintech applications. You will design, implement, and manage secure designs and protocols across our infrastructure, and guide our security compliance program in line with PCI-DSS, GDPR, ISO27001, and NIST CSF.

You will collaborate with development and DevOps teams to integrate security into the SDLC, conduct assessments and investigations, and stay ahead of evolving threats and regulatory

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of cybersecurity and security compliance experience (e.g., PCI-DSS) in fintech.
• Strong knowledge of security solutions (IPS/IDS, SIEM, FIM, FW, WAF) and encryption techniques.
• Experience with security assessment tools and methodologies (vulnerability scanning, penetration testing).
• Familiarity with SDLC, CI/CD, DevOps, and DevSecOps practices.

Responsibilities

• Develop, implement, and maintain secure designs, solutions, and protocols to protect data and applications.
• Lead and manage security compliance programs (PCI-DSS, GDPR where applicable).
• Conduct security assessments, vulnerability analyses, and penetration testing to identify risks.
• Collaborate with developers to integrate security best practices across dev and deployment lifecycles.
• Respond to incidents with root-cause analysis, remediation, and mitigation strategies.
• Stay current with security trends, vulnerabilities, and regulatory requirements.

Skills

IPS/IDS

SIEM

FIM

WAF

Encryption

SDLC/DevSecOps

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Kubernetes

Docker

Cloud security

Job description

Job Title: Security Subject Matter Expert

Introduction

We are looking for an experienced Security Subject Matter Expert to lead and contribute to MasrPay information security program for our fintech applications. This role is essential in safeguarding sensitive data, maintaining regulatory compliance, and ensuring the integrity and confidentiality of our systems.

Role Overview

The Security Subject Matter Expert will be responsible for designing, implementing, and managing secure designs/solutions and protocols across our infrastructure, and leading MasrPay security compliance program. This includes leveraging security tools such as IPS/IDS, SIEM, FIM, and WAF solutions, as well as establishing encryption and data protection practices, following PCI DSS requirements, and relevant regulations like GDPR, and security standards and frameworks like ISO27000, NIST-800 and CSF. The role requires close collaboration with application development and DevOps, security and network teams to ensure that security is integrated into every phase of the development lifecycle.

Responsibilities

• Develop, implement, and maintain secure design/solutions and protocols to protect sensitive data and applications.
• Strong knowledge and hands-on skills with IPS/IDS, SIEM, FIM, FWs and WAF.
• Conduct security assessments, vulnerability analysis, and penetration testing to identify risks.
• Collaborate with developers to integrate security best practices into the development and deployment processes.
• Ensure compliance with industry standards, such as PCI-DSS, and any other relevant regulations will be an added asset. e.g. GDPR, ISO27001.
• Manage encryption and data protection strategies across all tiers.
• Respond to and investigate security incidents, providing root cause analysis, remediation and mitigation strategies.
• Stay up-to-date with the latest security trends, vulnerabilities, and regulatory requirements.

Qualifications

• Bachelors degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of experience in cybersecurity and security compliance requirement, such as PCI-DSS, preferably within fintech or financial industries.
• Strong knowledge of security solutions, including IPS/IDS, SIEM, FIM, FW, WAF, and encryption techniques.
• Experience with security assessment tools and methodologies, including vulnerability scanning and penetration testing.
• String knowledge with SDLC, CI/CD pipelines, DevOps, and DevSecOps practices.

Preferred Skills

• Relevant certifications (e.g., CISSP, CEH, CISM, or GIAC).
• Familiarity with compliance requirements, such as PCI-DSS, SOC2, and GDPR.
• Knowledge of Kubernetes, Docker, and cloud security best practices.
• Experience with Unix platforms, Kafka, Keycloak, and data encryption in distributed systems.
• Strong analytical and problem-solving skills for incident response and forensic analysis.