Security Operation Center Engineer

Payter

1d • Remote

About The Position

We are growing rapidly and constantly expanding our global contactless payment ecosystem. Security is at the heart of everything we do, so we are looking for two SOC Engineers to build our Security Operations Centre from the ground up. Working closely with the Head of Software Engineering, the Cyber and Information Security Manager, and our DevOps team, you will define the checks, monitoring and detection that protect our corporate IT and the cloud environments behind our systems. You will be embedded within our DevOps team and work alongside our engineers every day, while reporting outside of the DevOps team. That independence means you can provide real checks and balances, so we know our controls are working, our policies are being followed, and remediation happens when it is needed. This is an excellent opportunity for a SOC Engineer who wants to shape a security function in a highly regulated, high-impact environment.

Requirements

• Hands-on experience in a SOC, security engineering or incident response role.
• Strong knowledge of Google Cloud Platform security (IAM, audit logging, Security Command Center, VPC) and Google Workspace administration and security.
• Experienced with SIEM platforms, ideally Google SecOps, including writing and tuning detection queries.
• A working knowledge of PCI DSS and have provided audit evidence in a regulated environment.
• Understand cloud architecture, networking, Linux and containerisation.
• An organised, analytical problem-solver with excellent communication skills.
• Confident challenging engineers constructively and explaining risk clearly to technical and non-technical colleagues.

Nice To Haves

• Experience with PCI P2PE, PIN or PTS, payment HSMs or key management is a strong advantage.
• Scripting skills (Python, Go or Bash) and Infrastructure as Code (Terraform) are a plus.
• Experience with, or a strong interest in, threat hunting, penetration testing and red team or purple team exercises.

Responsibilities

• Monitor, triage and investigate security alerts across Google Cloud Platform, Google Workspace, and our other cloud services.
• Design, build and tune detection rules, dashboards and alerting that give the business clear, real-time visibility of its security posture.
• Define and carry out daily, monthly and quarterly security checks, including log reviews, access recertifications, vulnerability scans, configuration drift and segmentation testing.
• Produce audit-ready evidence for our PCI compliance programme (DSS, P2PE, PIN and PTS) and support our compliance assessments.
• Lead first response to security incidents: contain threats, preserve evidence and drive remediation through to closure.
• Coordinate penetration tests and red team exercises and use the findings to strengthen our detection capabilities.
• Partner with the Lead DevOps Engineer, DevOps Engineers and Corporate IT Services to make sure security controls are in place, working and not bypassed.
• Help shape our SOC tooling, runbooks, automation and KPIs as the function grows.
• Take part in an out-of-hours on-call rota to respond to security incidents

Benefits

• Competitive salary and a discretionary bonus based on company performance
• 25 days of annual leave plus UK bank holidays
• Dedicated monthly “well-being days” to support mental health and work-life balance
• Attractive company pension plan
• Fully remote working environment with a focus on flexibility
• Opportunities for high-impact growth within an international scale-up in the payments industry

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed