About the Team
The team is developing a payment gateway that enables merchants to accept funds from users and send funds to users. The system stores user payment data, is subject to PCI DSS compliance, and integrates with payment systems, providers, gateways, and processors, including 3DS.
Responsibilities
•Design, implement, and manage infrastructure, establishing security controls and secure configurations in collaboration with DevOps
•Automate cloud operations and ensure deployments and configurations comply with security baselines
•Implement infrastructure security best practices, including IAM, network security, encryption, and monitoring
•Develop and maintain CI/CD pipelines with automated security checks such as SCA and SAST
•Implement security monitoring and logging using CloudWatch, CloudTrail, AWS Security Hub, and related tools
•Implement and manage security alerting to detect and respond to incidents promptly
•Apply security best practices in daily operations, including password management, phishing prevention, and security reviews of new solutions
•Conduct security assessments and periodic reviews required by PCI DSS, maintaining vulnerability and change management processes
•Manage and control access across services
•Prepare for and participate in PCI DSS audits, ensuring controls and evidence are in place
•Collaborate with development, operations, and security teams to promote shared security responsibility throughout the system lifecycle
•Train and advise team members on DevSecOps principles and secure engineering practices
•Participate in task definition, estimation, prioritization, and planning across weekly, monthly, quarterly, and annual horizons
•Optimize AWS infrastructure for security, performance, scalability, and cost efficiency
•Maintain documentation and provide regular reports on security posture, audit readiness, and operational metrics
Requirements
•At least 3 years of experience with cloud infrastructure
•Proficiency in DevSecOps tools and methodologies, including CI/CD, Docker, and Kubernetes
•Knowledge and application of cloud security best practices, particularly in AWS
•Understanding of PCI DSS requirements and experience implementing and maintaining compliance in AWS
•Experience implementing AWS security controls and monitoring, including AWS WAF, Shield, GuardDuty, Control Tower, Security Hub, CloudTrail Insights, KMS, CloudHSM, Macie, Secrets Manager, and Inspector
•Experience with AWS CloudWatch and ELK logging and monitoring tools
•Deep understanding of networking concepts and protocols, including VPNs, firewalls, and load balancers
•Experience with AWS security groups and IAM
•Experience with Helm
•Experience configuring SAML authentication
•Experience with SSO solutions
•Knowledge of encryption techniques and key management
•English proficiency at B1 level or higher
Nice to Have
•AWS certifications (AWS Certified Solutions Architect, AWS Certified Security – Specialty), CISSP or CCSP certification
•Experience implementing a DevSecOps culture within an organization
•Knowledge of security champion programs and security training for development teams
•Experience with Terraform / OpenTofu and Terragrunt
•Knowledge of the CKS certification program
•Knowledge of GitOps (Helmfile / ArgoCD / FluxCD)
•Experience with service mesh (Linkerd)
Conditions
•EU-based employment contract and a 3-year Cyprus work visa, with full support for relocation and visa processes, including assistance for family members
•Opportunity to obtain an EU passport after 4 years of residence
•Full relocation package, including flights to Limassol for the employee and family, a company-covered apartment for the first month, and relocation support
•Provident fund in Cyprus, co-funded by the employee and the company and available after probation
•Transparent performance reviews twice a year, with bonus opportunities and salary adjustments
•Private medical insurance for the employee and family
•Corporate mobile plan with unlimited use in Cyprus and roaming
•Mindfulness and well-being support, including psychological assistance with 50% coverage
•50% coverage of school and kindergarten fees for children
•Fully covered sports benefits, access to in-house electric scooters, and bike rentals
•Professional growth support, including language courses, conferences, training programs, and coaching
•Peer recognition program
•Fully equipped office in Limassol city center
•Free office breakfasts and lunches, an in-house coffee bar, and a health bar stocked with nutritious snacks
•International teams, corporate events, team buildings, and hackathons
