This role focuses on defining and implementing robust cloud security architectures to meet critical business and performance objectives. Responsibilities include documenting security controls and ensuring a smooth transition to cloud security-managed operations.

We are looking for a skilled professional to manage, maintain, and enhance our PCI DSS-compliant environment. The ideal candidate will safeguard systems storing, processing, or transmitting cardholder data, ensuring its confidentiality, integrity, and availability.

-Administer Windows and Linux servers effectively. -Implement and maintain PCI DSS security controls, ensuring continuous compliance. -Manage patch deployment and track vulnerability remediation. -Support vulnerability assessments, penetration testing, and remediation initiatives. -Collaborate with internal audit, compliance, and security teams during PCI assessments. -Develop essential documentation, SOPs, and evidence for PCI DSS audits. -Troubleshoot complex infrastructure, network, and security-related issues.

-Requires a minimum of 3 years of dedicated experience in Security Penetration Testing. -Possesses strong knowledge of PCI DSS v4.0 requirements and associated security controls. -Demonstrates a solid understanding of OWASP Top 10, MITRE ATT&CK, CVSS, and common attack vectors. -Hands-on experience with Windows, Linux, and network security environments. -Proficient with vulnerability scanning tools such as Qualys, Nessus, or Rapid7. -Familiarity with scripting languages like PowerShell, Bash, or Python for automation. -Understanding of core networking concepts including TCP/IP, VLANs, routing, and switching. -Knowledge of encryption, Multi-Factor Authentication (MFA), certificate management, and endpoint security solutions. -Experience in Web/API penetration testing. -Familiarity with SAST, DAST, and SCA tools, along with secure Software Development Lifecycle (SDLC) practices. -Experience in cloud security assessments and DevSecOps methodologies. -Familiarity with SIEM platforms like Splunk, QRadar, or Microsoft Sentinel.