Senior Security Engineer – Payment Gateway & Fraud Risk

Senior Security Engineer – Payment Gateway & Fraud Risk
JOB DESCRIPTION
Experience Level: 8 to 10 Years | Job Type: Full-time
Location: On-site / Hybrid | Department: Cybersecurity & Risk Infrastructure
JOB SUMMARY
We are seeking a seasoned Senior Security Engineer with 8 to 10 years of specialized expertise in payment security, AML/KYC compliance, and transaction risk monitoring systems. In this role, you will lead the security architecture and hardening of our payment gateway infrastructure, ensuring robust protection against financial fraud, data breaches, and emerging threats while maintaining strict adherence to global regulatory standards.
KEY RESPONSIBILITIES
· Payment Gateway Hardening: Architect, implement, and maintain end-to-end security frameworks for payment processing pipelines, tokenization services, and API endpoints.
· Risk & Transaction Monitoring Integration: Collaborate with risk engineering teams to embed real-time transaction monitoring, anomaly detection, and anti-fraud filters into transaction workflows.
· AML & Compliance Security Alignment: Ensure payment infrastructure complies with PCI-DSS Level 1, ISO 27001, SOC 2, AML/KYC guidelines, and regional financial regulations.
· Threat Modeling & Vulnerability Management: Conduct continuous threat modeling, penetration testing, and code reviews on payment APIs, microservices, and cryptographic key management systems.
· Cryptographic Control Management: Oversee HSM (Hardware Security Modules), key rotation, field-level encryption, and zero-trust network access (ZTNA) across banking and payment integrations.
Candidate should have following qualifications: -
Payment Gateway & FinTech Security
· Design and implement secure architectures for payment processing, tokenization, Hardware
· Security Modules (HSM), and point-to-point encryption (P2PE).
· Drive compliance and continuous readiness for PCI-DSS Level 1, PA-DSS/PCI-SSF, ISO 27001, and
· local financial regulations.
· Secure API integrations between merchant systems, payment gateways, acquiring banks, and card networks (Visa/Mastercard).
Application Security (AppSec)
· Perform threat modeling, architecture reviews, and static/dynamic code analysis (SAST/DAST) across core services.
· Mitigate OWASP Top 10 vulnerabilities, API security risks, and business logic flaws in financial
· transaction flows. Integrate automated security testing into CI/CD pipelines (DevSecOps).
Infrastructure & Network Security
· Secure cloud environments (AWS, Azure, or GCP) and hybrid network infrastructure (firewalls, WAF, Zero Trust/IAM, SIEM).
· Lead vulnerability management programs, patch management protocols, and infrastructure
· hardening guidelines.
· Coordinate regular internal and external Penetration Testing (Infra + App + Payment APIs).
REQUIRED QUALIFICATIONS & SKILLS
· Experience: 8–10 years of hands-on experience in cybersecurity, application security, or security engineering within Fintech, Banking, or Payment Gateway ecosystems.
· Payment Security Standards: Expert knowledge of PCI-DSS standards, tokenization, Point-to-Point Encryption (P2PE), EMV, and 3D Secure (3DS) protocols.
· Technical & Cryptographic Skills: Strong experience in API security (OAuth2, OIDC, Mutual TLS), cryptography (RSA/ECC, AES, HSM management), and Web Application Firewalls (WAF).
· Cloud & Network Security: Proficiency with cloud security architectures (AWS/Azure/GCP), container security (Kubernetes/Docker), and SIEM/SOAR integration.
· Programming & Automation: Fluency in languages such as Python, Go, Java, or C++ for security tool automation and script development.
· Education: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Security, or related field.
PREFERRED CERTIFICATIONS (PLUS)
· Certified Information Systems Security Professional (CISSP)
· Payment Card Industry Professional (PCIP) / Internal Security Assessor (ISA)
· Certified Information Security Manager (CISM)
· Certified Ethical Hacker (CEH) / Offensive Security Certified Professional (OSCP)
· AWS Certified Security - Specialty or Azure Security Engineer Associate
Please contact Mr. Pratik Badkul (+91 9902980960) / share your profiles at pratik.badkul@securoq.io
Thanks.

Work arrangement
Hybrid