Cyber Security Engineer at Verifone

Verifone has spent over 30 years leading the electronic payment technology industry, serving as one of the world's largest providers of payment systems. We are looking for a Cyber Security Engineer to join our team in a remote capacity to help protect our global infrastructure and drive innovation in secure payment solutions.

Responsibilities

• Design, implement, and maintain robust security measures across our networks, systems, and data.
• Conduct regular vulnerability scans, penetration testing, and security assessments to identify and mitigate risks.
• Manage and maintain Host Security Modules (HSM) and oversee the lifecycle of cryptographic keys.
• Ensure organizational adherence to PCI DSS standards through gap analysis, remediation planning, and audit coordination.
• Develop and enforce security policies, protocols, and procedures while staying ahead of emerging adversary tactics and threats.
• Analyze security incidents, investigate breaches, and provide detailed reports to management.
• Collaborate with internal departments and external auditors to maintain compliance with global standards like GDPR, ISO/IEC 27001, and others.
• Act as a subject matter expert, providing technical guidance and training to staff on security best practices.

Must-haves

• A Bachelor’s degree in computer science or a related technical field.
• At least 2 years of hands-on experience in enterprise vulnerability management and security remediation.
• Proven experience supporting diverse IT systems and processes within large-scale organizations.
• Proficiency with enterprise tools like SCCM and WSUS, including the ability to write PowerShell scripts for automation.
• Extensive experience using core vulnerability scanners such as Qualys or Tenable.
• Strong knowledge of OWASP Top 10 and the ability to articulate application security risks.
• A solid technical foundation in cloud-based architectures, networking, server infrastructure, and containerization.
• Fluency in English.

Nice-to-haves

• Relevant industry certifications such as CISSP, OSCP, CEH, Security+, or GIAC designations.
• Familiarity with security testing tools including Metasploit, Burp Suite, ZAP, and AppSpider.
• Experience with scripting languages like Python, Ruby, Perl, or BASH.
• Knowledge of risk assessment methodologies like CVSS.
• Experience with Windows and Linux operating systems.

Benefits

• Full-time, remote work environment.