Senior Security Analyst - Remote PCI DSS & SOC 2

Sola Payments; United States; Remote; USD 125,000 - 150,000; Full time

Job summary

Sola Payments is seeking a Senior Security Analyst to join the DevSecOps team, owning day-to-day security and compliance operations for the payment gateway and switch, including PCI DSS 4.0.1. The role focuses on security log review, IAM, incident handling, and regular PCI DSS and SOC 2 control execution.

As a senior member, you will work independently, serve as escalation point for security operations, and help strengthen controls as the business grows.

Qualifications

• Hands-on security operations experience
• Knowledge of PCI DSS and SOC 2 controls
• Experience with AWS GuardDuty and Cognito
• Experience with SIEM queries and XDR tooling
• Ability to manage recurring compliance deadlines
• Strong communication and documentation skills

Responsibilities

• Perform daily security log reviews across multiple tools and databases with evidence.
• Own PCI DSS and SOC 2 control calendar and coordinate audits.
• Operate XDR and FIM configurations and coordinate remediation with system owners.
• Monitor Cognito authentication failures and investigate suspicious logins.
• Verify GuardDuty coverage and monitor Sumo Logic dashboards and alerts.
• Provision, modify, and revoke access with MFA and least privilege.
• Lead security incident triage, containment, and post-incident analyses.
• Review firewall changes and conduct monthly rule reviews with network engineers.
• Maintain Confluence runbooks and provide monthly control metrics.
• Identify gaps in detection coverage and recommend improvements.

Skills

AWS

SIEM

XDR

FIM

Incident Response

Education

Bachelor's degree in Information Security or related field

Tools

Trend Micro

CrowdStrike

Feroot

Sumo Logic

Job description

Sola Payments is seeking a Senior Security Analyst to join the DevSecOps team, owning day-to-day security and compliance operations for the payment gateway and switch, including PCI DSS 4.0.1. The role focuses on security log review, IAM, incident handling, and regular PCI DSS and SOC 2 control execution.

As a senior member, you will work independently, serve as escalation point for security operations, and help strengthen controls as the business grows.