P

payabl.

Merchant payments and financial platform

Senior Security Operations Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • At least 5 years of experience in security operations or security engineering in financial services or another environment with formal incident-reporting obligations such as DORA or PCI DSS.
  • Strong hands-on experience with SIEM platforms such as Elastic/OpenSearch, Wazuh, or Splunk, and log-pipeline engineering.
  • Solid AWS security knowledge, including GuardDuty, Security Hub, IAM, VPC-level controls, cloud-native logging, and hardening.
  • Practical experience running vulnerability management, including scanners, prioritization, and remediation tracking.
  • Strong infrastructure-as-code skills.
  • Genuine enthusiasm for AI-assisted security operations, using LLMs and agents to triage, enrich, summarize, and automate.
  • Ability to independently own a domain end to end, prioritizing, deciding, delivering, and explaining.

Responsibilities

  • Design, build, and operate the SIEM from the ground up, including architecture, deployment, tuning, and ongoing operation.
  • Establish attack-surface monitoring through continuous discovery and review of internet-exposed assets.
  • Build AI-assisted triage and enrichment into the pipeline, including agent-based alert handling, correlation summaries, and draft incident timelines.
  • Establish the vulnerability management program, including deployment, asset coverage, risk-based prioritization, remediation service-level agreements, and reporting.
  • Implement processes and procedures for an effective vulnerability lifecycle.
  • Operate and continuously improve the end-to-end security incident process, including detection, classification, response, and post-incident review.
  • Develop and maintain runbooks, playbooks, and event handlers, and automate recurring work.
  • Harden and monitor the AWS estate, triaging and deduplicating GuardDuty, Security Hub, and native findings and driving them to remediation.
  • Drive security hardening across infrastructure and runtime security.
  • Aggressively automate routine security operations using scripting, APIs, infrastructure as code, and AI agents.
  • Run proof-of-concepts, evaluate tooling, and shape the technical roadmap for the security stack.
  • Provide security engineering consultancy to Engineering, IT, and DevOps teams.

Desired Qualifications

  • Hands-on Kubernetes security experience, including admission controllers, runtime detection such as Falco, and cluster hardening.
  • Experience with detection-as-code practices, including Sigma, version-controlled rules, and continuous integration for detections.
  • Certifications such as CCSP, CISSP, OSCP, or equivalent.

About the Company

payabl.

Merchant payments and financial platform

Payabl. provides financial technology that helps merchants manage money flow with a modular platform called payabl.one, which unifies card acquiring, 300+ local payment methods, POS, business accounts, and card issuing in one view. The platform combines these tools in a single interface, allowing merchants to process payments, accept many methods, manage POS transactions, maintain business accounts, and issue cards with expert support and reliable infrastructure. It differentiates itself by offering a single connected view that gives clear visibility and control over funds and transactions, backed by guided expertise and dependable infrastructure. Its goal is to give businesses clarity and control over complex financial processes, helping them manage funds more efficiently and grow with confidence.

Company size
11-50
Company stage
Acquired
Total funding
Not listed
Headquarters
Limassol Municipality, Cyprus
Founded
2011

Recently Posted Jobs

Explore more opportunities at payabl.

See more jobs