[Hiring] Security Operation Center Engineer @Payter B.V.

Role Description

We are growing rapidly and constantly expanding our global contactless payment ecosystem. Security is at the heart of everything we do, so we are looking for two SOC Engineers to build our Security Operations Centre from the ground up. Working closely with the Head of Software Engineering, the Cyber and Information Security Manager, and our DevOps team, you will define the checks, monitoring and detection that protect our corporate IT and the cloud environments behind our systems.

You will be embedded within our DevOps team and work alongside our engineers every day, while reporting outside of the DevOps team. That independence means you can provide real checks and balances, so we know our controls are working, our policies are being followed, and remediation happens when it is needed. This is an excellent opportunity for a SOC Engineer who wants to shape a security function in a highly regulated, high-impact environment.

Responsibilities

• Monitor, triage and investigate security alerts across Google Cloud Platform, Google Workspace, and our other cloud services.
• Design, build and tune detection rules, dashboards and alerting that give the business clear, real-time visibility of its security posture.
• Define and carry out daily, monthly and quarterly security checks, including log reviews, access recertifications, vulnerability scans, configuration drift and segmentation testing.
• Produce audit-ready evidence for our PCI compliance programme (DSS, P2PE, PIN and PTS) and support our compliance assessments.
• Lead first response to security incidents: contain threats, preserve evidence and drive remediation through to closure.
• Coordinate penetration tests and red team exercises and use the findings to strengthen our detection capabilities.
• Partner with the Lead DevOps Engineer, DevOps Engineers and Corporate IT Services to make sure security controls are in place, working and not bypassed.
• Help shape our SOC tooling, runbooks, automation and KPIs as the function grows.
• Take part in an out-of-hours on-call rota to respond to security incidents.

Qualifications

• You have hands-on experience in a SOC, security engineering or incident response role.
• You have strong knowledge of Google Cloud Platform security (IAM, audit logging, Security Command Center, VPC) and Google Workspace administration and security.
• You are experienced with SIEM platforms, ideally Google SecOps, including writing and tuning detection queries.
• You have a working knowledge of PCI DSS and have provided audit evidence in a regulated environment. Experience with PCI P2PE, PIN or PTS, payment HSMs or key management is a strong advantage.
• You understand cloud architecture, networking, Linux and containerisation.
• Scripting skills (Python, Go or Bash) and Infrastructure as Code (Terraform) are a plus.
• You have experience with, or a strong interest in, threat hunting, penetration testing and red team or purple team exercises.
• You are an organised, analytical problem-solver with excellent communication skills.
• You are confident challenging engineers constructively and explaining risk clearly to technical and non-technical colleagues.

Benefits

• Competitive salary and a discretionary bonus based on company performance.
• 25 days of annual leave plus UK bank holidays.
• Dedicated monthly “well-being days” to support mental health and work-life balance.
• Attractive company pension plan.
• Fully remote working environment with a focus on flexibility.
• Opportunities for high-impact growth within an international scale-up in the payments industry.