Senior Security & Compliance Engineer

kachyng.com; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

kachyng.com is seeking a Product Security/Compliance Engineer to build security controls and automation into platform and payment systems. You will monitor controls, perform threat modeling and design reviews, drive remediation, and collaborate with engineering to improve SDLC and operational hardening.

The role requires 6+ years in product security or compliance and hands-on PCI DSS, SOC 2, and cloud security experience. Ability to clearly explain risks to diverse stakeholders is essential.

Qualifications

• At least 6 years of product security or compliance engineering experience.
• Hands-on PCI DSS, SOC 2, and cloud security controls.
• Strong communication skills for explaining risk to cross-functional stakeholders.

Responsibilities

• Create evidence pipelines and monitor controls for PCI- and SOC-aligned programs.
• Conduct security design reviews and threat modeling.
• Drive remediation of identified security issues.
• Work with engineering teams to strengthen the secure software development lifecycle and operational hardening.
• Explain technical risks to stakeholders across functions.

Skills

Security design reviews

Threat modeling

Communication skills

Job description

Role overview

Build security controls and compliance automation into platform and payment-related systems. The work combines monitoring and evidence collection with design reviews, threat analysis, remediation, and collaboration with engineering teams to improve development and operational practices.

Responsibilities

• Create evidence pipelines and monitor controls for PCI- and SOC-aligned programs.
• Conduct security design reviews and threat modeling.
• Drive remediation of identified security issues.
• Work with engineering teams to strengthen the secure software development lifecycle and operational hardening.
• Explain technical risks to stakeholders across functions.

Requirements

• At least 6 years of product security or compliance engineering experience.
• Hands-on experience with PCI DSS, SOC 2, and cloud security controls.
• Strong communication skills, particularly when explaining technical risk to cross-functional stakeholders.