Senior DevSecOps Security Analyst – PCI/SOC 2 (Remote)

Sola Payments; Oregon; Hybrid; USD 125,000 - 150,000; Full time

Job summary

Sola is seeking a Sr. Security Analyst to join our DevSecOps team, owning day-to-day security and compliance for our payment gateway and switch, including PCI DSS 4.0.1.

You will perform security log reviews, IAM, incident handling, and quarterly control tasks while coordinating audits and remediation across AWS accounts and regional scopes. The role emphasizes independent work, escalation handling, and strengthening controls as the business scales.

Qualifications

• 3–5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.
• Practical experience with AWS (GuardDuty & Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted.
• Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.
• Proven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands.
• Strong ticket documentation skills and excellent written and verbal communication skills.

Responsibilities

• Security Log Review: perform daily reviews across multiple tools and retain evidence.
• Compliance Control Execution: manage PCI DSS and SOC 2 control calendar, audits support.
• XDR and File Integrity Monitoring: operate XDR and FIM configurations with health checks.
• Authentication Monitoring: monitor Cognito, investigate failures, coordinate access issues.
• Cloud and SIEM Monitoring: verify GuardDuty coverage and monitor logs/dashboards.
• Identity and Access Management: provision/revoke access with least privilege and MFA.
• Incident Response: lead triage, containment, and root cause analyses.
• Firewall Management: review rules and coordinate changes with network engineers.
• Documentation and Reporting: maintain runbooks and provide monthly control metrics.
• Continuous Improvement: identify gaps and document improvements.

Skills

Security operations

AWS security

SIEM analysis

XDR & FIM

Incident response

Access management

Documentation

Communication skills

After-hours support

Python/Node.js scripting

Education

Bachelor’s degree in Information Security or CS

Security certifications (CISSP, GIAC, CompTIA)

Tools

Trend Micro

CrowdStrike

Feroot

Sumo Logic

AWS Cognito/GuardDuty

Job description

Sola is seeking a Sr. Security Analyst to join our DevSecOps team, owning day-to-day security and compliance for our payment gateway and switch, including PCI DSS 4.0.1.

You will perform security log reviews, IAM, incident handling, and quarterly control tasks while coordinating audits and remediation across AWS accounts and regional scopes. The role emphasizes independent work, escalation handling, and strengthening controls as the business scales.