• You will build and run defensive security controls for highly-available multi-cloud payment systems running the latest technology. • You understand current threats, exploitation paths and risk tradeoffs in order to advise engineering teams on beneficial security features as well as prioritise management of defensive controls.

• Evaluate and implement methods to continually improve security and assist business with reducing risks • Be familiar with the security requirements and controls needed to maintain the business operations • Identify and communicate threats and vulnerabilities that could impact business operations • Assist with communication, implementation and analysis of compliance with security policies, standards and procedures • Collect, calculate, and format data for metrics reporting • Monitor Information Security support desk and assist with resolution

• Implement, maintain, and lead cybersecurity efforts for CMMC compliance • Design, implement, and monitor security controls for CMMC requirements • Lead vulnerability assessments and continuous risk management • Support incident response and threat hunting • Collaborate with compliance managers and operations teams

• Design and deploy firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption protocols across on-premises and cloud environments • Analyze network traffic and security alerts to identify breaches, respond to incidents, and mitigate risks • Conduct penetration testing and vulnerability scans to identify weaknesses, providing remediation strategies • Ensure adherence to regulations (e.g., HIPAA, GDPR) by reviewing security policies, supporting audits, and reporting compliance status • Work with IT, development, and product teams to integrate security into software development lifecycles (SDLC) and CI/CD pipelines • Develop security automation for cloud environments (e.g., AWS), CI/CD workflows, and DevSecOps practices