Security Operation Center Engineer

• Monitor, triage and investigate security alerts across Google Cloud Platform, Google Workspace, and our other cloud services. • Design, build and tune detection rules, dashboards and alerting that give the business clear, real-time visibility of its security posture. • Define and carry out daily, monthly and quarterly security checks, including log reviews, access recertifications, vulnerability scans, configuration drift and segmentation testing. • Produce audit-ready evidence for our PCI compliance programme (DSS, P2PE, PIN and PTS) and support our compliance assessments. • Lead first response to security incidents: contain threats, preserve evidence and drive remediation through to closure. • Coordinate penetration tests and red team exercises and use the findings to strengthen our detection capabilities. • Partner with the Lead DevOps Engineer, DevOps Engineers and Corporate IT Services to make sure security controls are in place, working and not bypassed. • Help shape our SOC tooling, runbooks, automation and KPIs as the function grows. • Take part in an out-of-hours on-call rota to respond to security incidents

• You have hands-on experience in a SOC, security engineering or incident response role. • You have strong knowledge of Google Cloud Platform security (IAM, audit logging, Security Command Center, VPC) and Google Workspace administration and security. • You are experienced with SIEM platforms, ideally Google SecOps, including writing and tuning detection queries. • You have a working knowledge of PCI DSS and have provided audit evidence in a regulated environment. Experience with PCI P2PE, PIN or PTS, payment HSMs or key management is a strong advantage. • You understand cloud architecture, networking, Linux and containerisation. • Scripting skills (Python, Go or Bash) and Infrastructure as Code (Terraform) are a plus. • You have experience with, or a strong interest in, threat hunting, penetration testing and red team or purple team exercises. • You are an organised, analytical problem-solver with excellent communication skills. • You are confident challenging engineers constructively and explaining risk clearly to technical and non-technical colleagues.

• Competitive salary and a discretionary bonus based on company performance • 25 days of annual leave plus UK bank holidays • Dedicated monthly “well-being days” to support mental health and work-life balance •

We are growing rapidly and constantly expanding our global contactless payment ecosystem. Security is at the heart of everything we do, so we are looking for two SOC Engineers to build our Security Operations Centre from the ground up. Working closely with the Head of Software Engineering, the Cyber and Information Security Manager, and our DevOps team, you will define the checks, monitoring and detection that protect our corporate IT and the cloud environments behind our systems. You will be embedded within our DevOps team and work alongside our engineers every day, while reporting outside of the DevOps team. That independence means you can provide real checks and balances, so we know our controls are working, our policies are being followed, and remediation happens when it is needed. This is an excellent opportunity for a SOC Engineer who wants to shape a security function in a highly regulated, high-impact environment. Responsibilities • Monitor, triage and investigate security alerts across Google Cloud Platform, Google Workspace, and our other cloud services. • Design, build and tune detection rules, dashboards and alerting that give the business clear, real-time visibility of its security posture. • Define and carry out daily, monthly and quarterly security checks, including log reviews, access recertifications, vulnerability scans, configuration drift and segmentation testing. • Produce audit-ready evidence for our PCI compliance programme (DSS, P2PE, PIN and PTS) and support our compliance assessments. • Lead first response to security incidents: contain threats, preserve evidence and drive remediation through to closure. • Coordinate penetration tests and red team exercises and use the findings to strengthen our detection capabilities. • Partner with the Lead DevOps Engineer, DevOps Engineers and Corporate IT Services to make sure security controls are in place, working and not bypassed. • Help shape our SOC tooling, runbooks, automation and KPIs as the function grows. • Take part in an out-of-hours on-call rota to respond to security incidents About Payter At Payter, we are innovators, pioneers, and leaders in the dynamic realm of unattended/self-service contactless and cashless payment technology in a wide range of markets such as Electric Vehicle Charging, Transportation, Retail, Hospitality, Vending, Charity, Parking, and beyond. The adaptable Payter platform accommodates a diverse range of payment technologies (NFC, EMV, Apple Pay, Google Pay, etc.), international banking processes, closed-loop payment and loyalty schemes, and telemetry. Through continuous innovation and in-house development, we redefine how vendors connect with their customers, empowering them to boost revenue, enhance user experiences, and access real-time sales and performance data. We support a broad range of technologies, from Contact & Contactless EMV, MIFARE, Wi-Fi, 5G, Bluetooth, Touch Screens and more. Our state-of-the-art products have an extremely long service life, are of high quality, compliant with multiple international standards, boast great design, are user- friendly for all, multifunctional, and easy to integrate. Requirements • You have hands-on experience in a SOC, security engineering or incident response role. • You have strong knowledge of Google Cloud Platform security (IAM, audit logging, Security Command Center, VPC) and Google Workspace administration and security. • You are experienced with SIEM platforms, ideally Google SecOps, including writing and tuning detection queries. • You have a working knowledge of PCI DSS and have provided audit evidence in a regulated environment. Experience with PCI P2PE, PIN or PTS, payment HSMs or key management is a strong advantage. • You understand cloud architecture, networking, Linux and containerisation. • Scripting skills (Python, Go or Bash) and Infrastructure as Code (Terraform) are a plus. • You have experience with, or a strong interest in, threat hunting, penetration testing and red team or purple team exercises. • You are an organised, analytical problem-solver with excellent communication skills. • You are confident challenging engineers constructively and explaining risk clearly to technical and non-technical colleagues. What We Offer • Competitive salary and a discretionary bonus based on company performance • 25 days of annual leave plus UK bank holidays • Dedicated monthly “well-being days” to support mental health and work-life balance • Attractive company pension plan • Fully remote working environment with a focus on flexibility • Opportunities for high-impact growth within an international scale-up in the payments industry Originally posted on Himalayas SOC-Engineer, Security-Engineer, Security-Analyst, Cybersecurity-Engineer, Information-Security-Engineer, Security-Operations-Engineer, Security-Operations-Center-(SOC)-Engineering, Cybersecurity-Operations-Engineer