Security Operations Engineer - PCI DSS
About the role
The Security Operations Engineer - PCI DSS will join an innovative payments technology company on a three-month contract to lead the annual PCI DSS v4.0.1 compliance cycle as a Level 2 service provider. This hands-on role combines technical engineering with program ownership, including implementing technical controls, assembling and quality-checking evidence, completing the SAQ D, and preparing the Attestation of Compliance. The engineer will work closely with DevOps and operations teams, focusing on logging, monitoring, vulnerability management, and compliance documentation, ensuring all outputs are suitable for external assessment. The position requires strong AWS security engineering skills, experience with SIEM/log platforms, and the ability to independently manage the compliance delivery plan.
Must have
- Demonstrable experience taking an organisation through PCI DSS compliance, ideally more than once and ideally including v4.x.
- Working knowledge of PCI DSS v4.0.1, including the changes from v3.2.1 and the requirements mandatory from 31 March 2025.
- Direct experience completing SAQ D, or preparing evidence for a Report on Compliance.
- Hands-on AWS security engineering: IAM policy design, VPC and network segmentation, audit logging, secrets and key management, and infrastructure-as-code. Equivalent depth in another major public cloud will be considered where the candidate can demonstrate transferable design judgement.
- Hands-on experience with SIEM or centralised log platforms in a compliance context — log source onboarding, parsing and normalisation, correlation and alert rule development, file integrity monitoring, retention configuration, and tuning to reduce false positives. Direct Wazuh experience is a strong advantage; equivalent open-source stacks (OSSEC, Elastic Security, Graylog, Security Onion) are acceptable. Candidates should be able to name the platforms they have worked with and describe what they configured, not only what they monitored.
- Practical experience in vulnerability management, logging and monitoring, access management and secure configuration baselines.
- Ability to independently plan, track, report and escalate. No project manager will be assigned.
- Excellent written English. A significant portion of this role is documentation and evidence that must be read and accepted by others.
- Willingness to record a control as not in place where that is the accurate position.
Nice to have
- Payments, fintech or regulated financial services background.
- Understanding of the acquirer, processor and card scheme landscape.
- Experience of Level 1 service provider validation, or of taking an organisation from self-assessment to QSA-led assessment.
- PCIP, ISA, CISSP, CISM or equivalent certification.
- Jira administration and workflow configuration.
- Familiarity with ISO 27001 or SOC 2.
Technologies
- AWS
- CISM
- CISSP
- DevOps
- Fintech
- IAM
- Infrastructure as Code
- Intrusion Detection
- ISO 27001
- Jira
- PCI DSS
- Penetration Testing
- SIEM
- SOC 2
- VPC
- Vulnerability Scanning
Highlights
The role offers flexibility in work hours and location, access to online learning platforms and a professional development budget, and a collaborative, social work environment. This is a three-month contract position. The company emphasizes managing energy over time and encourages applications from those passionate about technology and payments.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka