Minimum 5 years in implementation, auditing or compliance assessment under PCI DSS
Information security management
Knowledge of the 12 requirements of PCI DSS v4.0
Audits and compliance assessments
Vulnerability management and analysis; incident response
Network security: firewalls, IDS/IPS, Zero Trust
Hardening of Windows and Linux systems
Knowledge of security frameworks: ISO 27001, NIST, CIS Controls
Application testing: web penetration testing based on OWASP Top 10
Security testing of REST/SOAP APIs
Secure code review (SAST / DAST)
Knowledge of vulnerabilities: XSS, SQLi, CSRF, IDOR
Scripting for automation of security tasks
Cloud security (AWS, Azure, GCP)
Experience in DevSecOps and secure CI/CD pipelines
Conversational English for interaction with international teams.

Information Security Specialist – PCI DSS

Key skills