Senior Security Analyst - PCI/SOC 2 & Incident Response (Remote)

Jobgether; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Fully remote

Remote work from US

Professional development

Competitive salary

Job summary

Jobgether is partnering with a United States–based company to hire a Senior Security Analyst for a fully remote role focused on protecting payment data and ensuring PCI DSS 4.0.1 and SOC 2 compliance across a cloud/FW/SIEM environment.

You will own security operations, incident response, IAM, and audit readiness with cross-functional collaboration across engineering, infrastructure, network, and compliance teams.

Qualifications

• 3-5 years of hands-on experience in security operations or a related IT security discipline.
• Experience with AWS services, particularly GuardDuty and Cognito, SIEM queries, XDR tools, Windows and Linux logs.
• Working knowledge of PCI DSS and SOC 2 control execution, audit evidence management, least-privilege access, change control, and incident response procedures.
• Ability to work independently, manage recurring compliance deadlines, prioritize competing demands, and maintain consistent operational execution.
• Strong documentation skills, including the ability to maintain clear tickets, incident timelines, audit evidence, procedures, and root cause analyses.
• Excellent written and verbal communication skills, with the ability to collaborate effectively with application, infrastructure, network, and compliance teams.
• Availability to participate in after-hours incident response, including a weekend and holiday backup rotation.
• Preferred: Bachelor's degree in Information Security, Computer Science, or related field.
• Preferred: Experience in payments/fintech with PCI DSS requirements.
• Preferred: Certifications such as CompTIA Security+, GIAC, CISSP, etc.
• Preferred: Familiarity with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.
• Preferred: Scripting in Python or Node.js.

Responsibilities

• Security Monitoring and Log Reviews across multiple security tools and environments.
• Compliance and Audit Readiness for PCI DSS and SOC 2 control calendar; manage evidence and scans.
• XDR and File Integrity Monitoring configurations and remediation coordination.
• Authentication Monitoring and investigation of anomalous activity with application owners.
• Cloud and SIEM Operations across AWS and Sumo Logic; escalate gaps and collection failures.
• Identity and Access Management provisioning and revocation; enforce least-privilege and MFA.
• Incident Response leadership including containment, timelines, reports and root cause analyses.
• Firewall Management including rule reviews and changes with network engineers.
• Documentation and Reporting of security procedures and incident response runbooks; monthly control reports.
• Continuous Improvement and Team Support in detection gaps and operational processes.
• After-hours incident response coverage and weekend/holiday rotations.

Skills

Security operations

Incident triage

IAM management

PCI DSS / SOC2

AWS security

XDR / SIEM

Documentation

Communication

After-hours support

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

Trend Micro

CrowdStrike

Feroot

Sumo Logic

Amazon Cognito

AWS GuardDuty

Job description

Jobgether is partnering with a United States–based company to hire a Senior Security Analyst for a fully remote role focused on protecting payment data and ensuring PCI DSS 4.0.1 and SOC 2 compliance across a cloud/FW/SIEM environment.

You will own security operations, incident response, IAM, and audit readiness with cross-functional collaboration across engineering, infrastructure, network, and compliance teams.