Security Operations Engineer - PCI DSS
About the role
The Security Operations Engineer - PCI DSS will join an innovative payments technology company on a three-month contract to lead the annual PCI DSS v4.0.1 compliance cycle as a Level 2 service provider. This hands-on engineering role combines technical implementation with program ownership, including implementing and verifying technical controls, delivering logging and monitoring requirements, working with DevOps on SIEM and intrusion detection, and preparing compliance documentation and evidence. The engineer will also coordinate vulnerability scanning, penetration testing, and third-party due diligence, while maintaining operational routines and documentation for ongoing compliance. The ideal candidate will have demonstrable experience with PCI DSS compliance, hands-on AWS security engineering, and practical experience with SIEM/log platforms and vulnerability management. The company offers a collaborative environment, flexibility in work hours and location, and professional development opportunities.
Must have
- Demonstrable experience taking an organisation through PCI DSS compliance, ideally more than once and ideally including v4.x.
- Working knowledge of PCI DSS v4.0.1, including the changes from v3.2.1 and the requirements mandatory from 31 March 2025.
- Direct experience completing SAQ D, or preparing evidence for a Report on Compliance.
- Hands-on AWS security engineering: IAM policy design, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code. Equivalent depth in another major public cloud will be considered where the candidate can demonstrate transferable design judgement.
- Hands-on experience with SIEM or centralised log platforms in a compliance context — log source onboarding, parsing and normalisation, correlation and alert rule development, file integrity monitoring, retention configuration, and tuning to reduce false positives. Direct Wazuh experience is a strong advantage; equivalent open-source stacks (OSSEC, Elastic Security, Graylog, Security Onion) are acceptable. Candidates should be able to name the platforms they have worked with and describe what they configured, not only what they monitored.
- Practical experience in vulnerability management, logging and monitoring, access management and secure configuration baselines.
- Ability to independently plan, track, report and escalate. No project manager will be assigned.
- Excellent written English. A significant portion of this role is documentation and evidence that must be read and accepted by others.
- Willingness to record a control as not in place where that is the accurate position.
Nice to have
- Payments, fintech or regulated financial services background.
- Understanding of the acquirer, processor and card scheme landscape.
- Experience of Level 1 service provider validation, or of taking an organisation from self-assessment to QSA-led assessment.
- PCIP, ISA, CISSP, CISM or equivalent certification.
- Jira administration and workflow configuration.
- Familiarity with ISO 27001 or SOC 2.
Technologies
- AWS
- CISM
- CISSP
- Cloud
- DevOps
- Fintech
- IAM
- Infrastructure as Code
- Intrusion Detection
- ISO 27001
- Jira
- PCI DSS
- Penetration Testing
- SIEM
- SOC 2
- VPC
- Vulnerability Scanning
Highlights
This is a three-month contract role with flexibility in work hours and location. The company provides access to online learning platforms, a professional development budget, and a dynamic social culture. Leave benefits are included. Application is encouraged for those eager to contribute to the team's success.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka