Platform Infrastructure and Security

Platform Infrastructure and Security

Senior Security Engineer, Payment Platform Infrastructure — Remote (Worldwide)

Strengthen cloud detection and vulnerability management for a payment-enabled platform, producing reliable technical evidence for security and PCI controls.

Vacancy details

This is a private vacancy. Company details stay confidential until InVault confirms a serious candidate fit.

Status
Active
Date posted
2026-10-12
Open until
2027-01-10
Employment type
Full-time / Contractor
Source-listed languages
Not specified
Language requirement
No mandatory language inferred
Work arrangement
Remote
Physical workplaces
Not specified
Applicant eligibility
Worldwide
Arrangement scope 1
Vacancy-wide (no geographic assertion): Remote

Location and working arrangements

Applicant eligibility: Worldwide

  • Vacancy-wide (no geographic assertion): Remote

Overview

Lead infrastructure-security work for a platform that processes payments for travel businesses. This senior role focuses on the operational foundations of security: identifying weaknesses, collecting useful telemetry and ensuring remediation happens. You will coordinate with platform, product and IT teams and provide dependable technical evidence for customer assurance and payment-security controls.

Requirements

  • Candidates need at least eight years in security engineering with strong operational depth, plus AWS, Kubernetes and SIEM experience.
  • Large-scale vulnerability management and experience with SOC 2 and/or PCI DSS technical controls are required.
  • Payments-security experience is preferred.

Responsibilities

  • Maintain a consolidated view of vulnerabilities across dependencies, images, containers and cloud resources.
  • Prioritize findings according to exploitability, exposure and business importance, and drive issues through to resolution.
  • Automate collection, normalization, routing and reporting so engineers receive clear, actionable work.
  • Strengthen security logging, retention and detection coverage, including coordination with a managed detection provider.
  • Develop cloud guardrails and hardening practices, support incident exercises and follow through on corrective actions.
  • Supply evidence such as access reviews and scan results for assurance obligations.
  • Help secure internal AI workflows by controlling credentials, permissions, data access and audit records.

Conditions

  • This full-time remote position is offered through a B2B contractor agreement.

Tech stack

  • AWS
  • Kubernetes
  • SIEM tooling