Description

You will lead security compliance and engineering efforts for API services and payment gateway integrations.

Responsibilities

• Own PCI DSS compliance by conducting regular assessments, gap analyses, and remediation strategies.
• Design and manage security controls across the API development lifecycle to protect sensitive data.
• Perform secure code reviews and vulnerability management, including scans and penetration testing.
• Develop incident response plans and lead investigations into security breaches related to API services.
• Prepare documentation for PCI DSS and other security audits to demonstrate compliance.

Required Skills

• 5+ years of experience in security engineering or security compliance roles.
• Deep expertise in PCI DSS compliance and audit processes.
• Strong understanding of API security best practices, encryption techniques, and secure coding.
• Hands-on experience with vulnerability scanners, penetration testing tools, and SIEM systems.
• Proficiency with security frameworks including ISO 27001, NIST, and GDPR.
• Experience securing cloud-native applications within AWS environments.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CISSP, CISA, CISM, or PCI QSA.

Preferred Skills

• Experience with DevSecOps practices and integrating security into CI/CD pipelines.
• Knowledge of data privacy regulations and their implications on API services.
• Experience working in agile development environments.

Key Skills

Education

Bachelor’s degree in Computer Science, Information Security