Note: The job is a remote job and is open to candidates in USA. TASC (Total Administrative Services Corporation) is seeking a hands-on Senior Security Operations Engineer to help secure and scale their platform at Xformative Payment Systems, a company specializing in cloud-native payment processing solutions. The role involves owning day-to-day security operations across cloud infrastructure and application workloads, with a focus on risk identification and automation.
Responsibilities
- Detect, Protect, and Respond (Hands-On Security Operations)
- Own day-to-day security operations for AWS-based cloud and serverless workloads including threat detection, alert triage, incident response, forensics, and post-incident learning
- Build and tune detections and automations (SIEM rules, SOAR/runbooks, detection-as-code) to reduce MTTA/MTTR and eliminate noisy alerts
- Secure our delivery pipelines & runtime
- Harden CI/CD and software supply chain, and drive “secure by default” patterns in our SDLC
- Lead cloud/serverless hardening (IaC reviews, policy-as-code, least privilege IAM design, network segmentation)
- Raise the bar across the organization (beyond prod)
- Partner with DevOps and Engineering teams to evolve identity & access, endpoint/EDR posture
- Coordinate vulnerability management end-to-end: scanning, prioritization, remediation, and reporting
- Contribute to security governance (policies, standards, tabletop exercises, BCP/DR inputs) and support compliance efforts (e.g., SOC 2/PCI DSS)
- Influence, automate, and measure
- Build security tooling and integrations for engineers, acknowledging that ease of use and low friction will encourage adoption and adherence
- Define metrics/KPIs and regularly communicate risk & progress to engineering and leadership
- Mentor engineers on secure design and champion a positive, enablement-first security culture
- Participate in architecture and threat modeling discussions to identify security risks early in the design process
Skills
- Bachelor's degree in computer science, engineering, or a related field, or equivalent experience in a similar role within the technology sector
- Applicants must be authorized to work in the U.S
- 5 or more years of large-scale distributed system development
- Minimum of 3 years' fintech experience, or equivalent experience with regulated environments with compliance requirements (e.g., SOC2, PCI DSS)
- Minimum of 5 years working in Security Operations/Cloud Security/Blue Team roles, with deep, hands-on experience in AWS (IAM/GuardDuty/CloudTrail/CloudWatch)
- Practical expertise with SIEM/log analytics, EDR, and secrets management (e.g., Vault)
- Experience with cloud platforms (AWS preferred, GCP, Azure) and containerization technologies (Docker, ECS)
- Experience with CI/CD pipelines and tools (Github Actions)
- Willingness to participate in a shared on-call rotation for security incidents
- Strong programming skills (Node, Typescript)
- Expertise in system administration, networking, and operating systems (Linux/Unix)
- Proficient in automation tools (Github Actions, Cloudformation, Terraform, Serverless, AWS SDK)
- Knowledge of AWS monitoring and logging tools such as Cloudwatch, CloudTrail, SecurityHub, GuardDuty. etc
- Exceptional attention to detail with a preference for highly structured procedures
- Solid grasp of CI/CD security, supply-chain risks, and IaC (Terraform) security reviews
- Strong incident response skills across detection, investigation, containment, and recovery especially in complex cloud-native environments
Benefits
- Our flexible and fully remote work setup allows you to balance your professional and personal life seamlessly
Company Overview
TASC (Total Administrative Services Corporation) is an award-winning nationwide administrator of tax-advantaged health benefits plans offering comprehensive services for Clients, Participants, and Providers and serving companies ranging in size from one employee to thousands! New product development, innovative tools, and outstanding, transparent service keep TASC’s service offerings at the forefront of third-party benefits administration. It was founded in 1975, and is headquartered in Madison, Wisconsin, USA, with a workforce of 501-1000 employees. Its website is https://www.tasconline.com.