Payment Security Engineer

Paym****ent Security Engineer, 12m FTC, London

As a Payment Security Engineer at Pay.UK, you will apply specialist knowledge in payment security, cryptography and security architecture to services that support the UK’s interbank payment systems. This role offers broad technical scope across existing payment schemes, future service developments and security standards, with a clear focus on secure design, assurance and resilience.

You’ll work across the full lifecycle of payment services, helping ensure that security requirements, cryptographic controls and key management practices are defined, reviewed and maintained in a complex, regulated environment. If you’re looking for a role where deep technical knowledge is central to the work, this is a chance to support infrastructure that underpins payments used every day across the UK.

Accountabilities

• Review payment infrastructure, service and technology changes to identify security risks, control gaps and required improvements.
• Provide security guidance during the design, development, implementation and operation of payment systems and services.
• Assess security architectures and design proposals against Pay.UK requirements, security principles and industry good practice.
• Advise on cryptographic controls, authentication mechanisms, encryption standards, PKI and key lifecycle management.
• Evaluate cryptographic controls used by suppliers, service providers and participants where appropriate.
• Contribute to security assessments, risk reviews and assurance activities for payment services and supporting technologies.
• Develop and maintain security requirements, standards, guidance and related artefacts for payment systems and supporting services.
• Monitor emerging threats, vulnerabilities, technologies and regulatory developments relevant to payment security and cryptographic risk.

Qualifications, Skills and Experience

• Degree in Cyber Security, Information Security, Computer Science, Engineering or a related discipline, or equivalent professional experience.
• Professional information security qualification such as CISSP, CISM, CISMP, CCSP or equivalent.
• Extensive experience in cyber or information security, including security architecture, risk assessment and security assurance.
• Extensive practical knowledge of cryptography, encryption technologies, authentication mechanisms, PKI, and key management practices.
• Experience designing, reviewing and assuring secure technology solutions in complex or highly regulated environments, and communicating security risks to technical and non-technical stakeholders.