Senior Security & Compliance Engineer - PCI & Cloud

KEH Camera; Atlanta (GA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) plan

Health and dental coverage

Paid time off

Job summary

KEH seeks a Senior Security Engineer to own KEH's security program across e‑commerce, retail, and corporate operations. You will protect payment data, PII, and employee data, driving security governance, cloud/app security, and incident response in an fast-paced environment.

You will collaborate with IT, Engineering, Legal, Finance, and HR to embed security into systems, ensure PCI DSS and privacy compliance, and lead proactive risk management and awareness efforts across a distributed

Qualifications

• Bachelor's degree in computer science, information security, or related field, or equivalent experience.
• 10+ years in information security, cybersecurity, risk, or compliance, incl. e‑commerce and payment data.
• Demonstrated ownership of incident response (IR program).
• Strong security principles, controls, vulnerability management, data protection.
• Hands-on cloud security experience (GCP) with app infra and 3rd‑party integrations.
• Experience implementing PCI DSS compliance program.
• Experience securing a distributed/remote workforce (endpoints, remote access).
• Knowledge of privacy rules (CCPA, GDPR) in employee data context.

Responsibilities

• Develop, implement, and enforce security policies, controls, and procedures protecting data.
• Conduct risk assessments, vulnerability reviews, and security audits; document findings and drive mitigations.
• Design and maintain security controls across cloud, e‑commerce, and network environments; include access controls and segmentation.
• Own incident response end-to-end: IR plan, investigations, containment, and lessons learned.
• Ensure PCI DSS and privacy compliance, including documentation and evidence.
• Build and maintain compliance documentation, risk registers, and audit-ready records.
• Collaborate with IT, Engineering, Legal, Finance, Operations, and HR to embed security in systems and processes.
• Monitor threats and regulatory changes; implement proportionate safeguards.
• Advise on security best practices, data handling, and incident escalation.
• Develop and deliver security awareness training and communications.

Skills

Incident response ownership

Cloud security (GCP)

PCI DSS compliance

Privacy & data protection

Security governance & controls

Risk management

Education

Bachelor's degree or equivalent

Tools

SIEM tooling

Vulnerability scanning

Penetration testing

IAM

Job description

KEH seeks a Senior Security Engineer to own KEH's security program across e‑commerce, retail, and corporate operations. You will protect payment data, PII, and employee data, driving security governance, cloud/app security, and incident response in an fast-paced environment.

You will collaborate with IT, Engineering, Legal, Finance, and HR to embed security into systems, ensure PCI DSS and privacy compliance, and lead proactive risk management and awareness efforts across a distributed