Senior Payments Security Engineer — AWS, PCI & SDLC

Storm2; California; On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity compensation

Benefits package

Job summary

Storm2’s client is a San Francisco-based payments infrastructure company delivering scalable payment solutions for businesses of all sizes. The Security Engineer, Payments Infrastructure will own security across AWS infrastructure and the corporate environment, partnering with engineers to influence architecture and drive remediation from design through to production.

You’ll work across PCI scope, cryptographic keys, and the software supply chain, ensuring robust security controls and incident

Qualifications

• Minimum 5+ years of hands-on security engineering experience.
• Proven ability to remediate vulnerabilities, not just report them.
• Strong AWS security experience in production environments.
• Java development experience and secure coding practices.
• Incident response leadership and coordination.
• Knowledge of PCI DSS and security controls in regulated contexts.
• Cryptography and key-management experience.
• Clear communication of security decisions to engineers and stakeholders.

Responsibilities

• Partner with engineering on threat modelling, secure design and implementation.
• Secure AWS infrastructure and employee workstations.
• Lead security incident response and remediation.
• Own vulnerability management across scanning, pentests and bug bounty.
• Hardening CI/CD pipelines and software supply chain.
• Support PCI architecture and HSM key operations.
• Define security controls and guardrails for internal AI tooling.

Skills

Security engineering

AWS security

Java development

Vulnerability remediation

Incident response

PCI DSS controls

Cryptography & keys

Communication with engineers

Tools

Terraform

CI/CD security

Okta

CrowdStrike

Palo Alto Prisma Access

Nexus

Bug bounty

Job description

Storm2’s client is a San Francisco-based payments infrastructure company delivering scalable payment solutions for businesses of all sizes. The Security Engineer, Payments Infrastructure will own security across AWS infrastructure and the corporate environment, partnering with engineers to influence architecture and drive remediation from design through to production.

You’ll work across PCI scope, cryptographic keys, and the software supply chain, ensuring robust security controls and incident