IT Security Engineer

Що робити

Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;
Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;
Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;
Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;
Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;

Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;
Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;
Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;
Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;
Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;