Vacancy details
This is a private vacancy. Company details stay confidential until InVault confirms a serious candidate fit.
- Status
- Active
- Date posted
- 2026-10-12
- Open until
- 2027-01-10
- Employment type
- Full-time / Contractor
- Source-listed languages
- Not specified
- Language requirement
- No mandatory language inferred
- Work arrangement
- Remote
- Physical workplaces
- Not specified
- Applicant eligibility
- Worldwide
- Arrangement scope 1
- Vacancy-wide (no geographic assertion): Remote
Location and working arrangements
Applicant eligibility: Worldwide
- Vacancy-wide (no geographic assertion): Remote
Overview
Lead infrastructure-security work for a platform that processes payments for travel businesses. This senior role focuses on the operational foundations of security: identifying weaknesses, collecting useful telemetry and ensuring remediation happens. You will coordinate with platform, product and IT teams and provide dependable technical evidence for customer assurance and payment-security controls.
Requirements
- Candidates need at least eight years in security engineering with strong operational depth, plus AWS, Kubernetes and SIEM experience.
- Large-scale vulnerability management and experience with SOC 2 and/or PCI DSS technical controls are required.
- Payments-security experience is preferred.
Responsibilities
- Maintain a consolidated view of vulnerabilities across dependencies, images, containers and cloud resources.
- Prioritize findings according to exploitability, exposure and business importance, and drive issues through to resolution.
- Automate collection, normalization, routing and reporting so engineers receive clear, actionable work.
- Strengthen security logging, retention and detection coverage, including coordination with a managed detection provider.
- Develop cloud guardrails and hardening practices, support incident exercises and follow through on corrective actions.
- Supply evidence such as access reviews and scan results for assurance obligations.
- Help secure internal AI workflows by controlling credentials, permissions, data access and audit records.
Conditions
- This full-time remote position is offered through a B2B contractor agreement.
Tech stack
- AWS
- Kubernetes
- SIEM tooling
