Cyber Security Engineer
PaySupp Cyber Security Engineer
The Cybersecurity Engineer is responsible for safeguarding
PaySupp’s infrastructure, applications, and data by implementing, monitoring,
and continuously improving security controls. This role owns the firewalls,
WAFs, SIEM integrations, vulnerability scanning, penetration testing workflows,
and incident response processes. The ideal candidate has strong hands-on
technical skills, a proactive security mindset, and the ability to strengthen
security across on-prem, cloud, and Kubernetes environments.
• Own and administer firewalls (Fortinet preferred) and Web
Application Firewalls (WAF).
• Configure firewall policies, VPNs, NAT rules, security
profiles, and traffic monitoring.
• Perform continuous vulnerability assessments using tools
such as OpenVAS, Nessus, or Qualys.
• Coordinate and perform penetration testing (internal,
external, and application-level).
• Remediate findings in collaboration with engineering and
DevOps teams.
• Implement and maintain endpoint, server, and container
security controls.
• Monitor threat intelligence sources and update security
policies accordingly.
• Maintain SIEM integrations (e.g., ELK, OpenSearch, or
commercial SIEMs).
• Conduct security hardening for Ubuntu servers, Kubernetes
clusters, and cloud environments.
• Lead incident response procedures and root-cause analysis.
• Document and enforce security policies, SOPs, and
compliance-related requirements.
• Support SOC 2, PCI, and regulatory audit readiness.
Requirements
• Strong experience with enterprise firewalls (Fortinet
strongly preferred; Palo Alto, Cisco, or Sophos acceptable).
• Experience deploying and managing Web Application
Firewalls (Cloudflare, FortiWeb, ModSecurity, etc.).
• Hands-on experience with vulnerability scanners (OpenVAS,
Nessus, Qualys).
• Knowledge of penetration testing methodologies and tools
(Burp Suite, Nmap, Metasploit, SQLMap).
• Strong knowledge of Linux security (Ubuntu hardening, SSH
policies, firewall rules).
• Comfortable analyzing logs and incidents using SIEM or
syslog solutions.
• Understanding of OWASP Top 10 and common attack vectors.
• Experience implementing secure networking (VLANs, VPNs,
DMZ segmentation).
• Ability to produce clear security reports and remediation
plans.
• Strong communication and documentation skills.
• Experience with Kubernetes and container security (Falco,
Trivy, admission controllers).
• Experience securing cloud-native environments (Azure, AWS,
GCP).
• Familiarity with CI/CD security (code scanning, secrets
management).
• Knowledge of data encryption, certificates, TLS
management, and key rotation.
• Experience participating in SOC 2, PCI DSS, or ISO27001
processes.
• Professional certifications such as CEH, eJPT, OSCP,
Security+, CySA+.
Benefits
- Competitive salary package
- Health insurance and social insurance
- Opportunities for professional development and growth
- Collaborative and inclusive work environment
- Flexible work schedule and remote work options
Join PaySupp's dynamic cybersecurity team and contribute to safeguarding our digital infrastructure! Apply now to be a part of our commitment to secure payment solutions.