At a Glance
- Tasks: Support and maintain payment HSMs, ensuring secure data protection and compliance.
- Company: Join FIS, a leading fintech company with a diverse and inclusive culture.
- Benefits: Enjoy a flexible work environment, competitive salary, and personal development resources.
- Other info: Collaborate with diverse teams and contribute to meaningful projects.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology.
- Qualifications: 5-7 years in cybersecurity, hands-on experience with HSMs, and strong communication skills.
The predicted salary is between 60000 - 80000 £ per year.
As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we would like to ask you: Are you FIS?
About the role:
The Cyber Security Engineer is responsible for supporting the enterprise's payment HSM infrastructure, cryptographic key-management operations, and data-protection technology stack. The analyst operates and maintains payment-grade HSMs and related devices across secure data-center environments, performing inspections, tamper checks, controlled access, and operational troubleshooting. In addition, this role supports enterprise data-protection tools enabling encryption-at-rest and in-motion across applications, databases, and cloud workloads.
About the team:
The Data Protection Team is a core part of the Cybersecurity organization responsible for protecting sensitive enterprise data through a data-centric security model. Our mission is to identify, secure, encrypt, classify, and govern data across applications, infrastructure, and cloud platforms, ensuring compliance with internal security standards and industry regulations. The team manages enterprise tools for data discovery, encryption, key management and HSMs. Cybersecurity Analyst Senior will be involved in state-of-the-art tools to protect data at rest and in transit, on-prem and cloud.
What you will be doing:
- Support and maintain payment HSMs used for key generation, loading, and translation.
- Coordinate HSM firmware upgrades, replacements, module swaps, and secure decommissioning following documented procedures.
- Ensure HSMs are housed in compliant, dual-controlled, secured racks within data centers.
- Execute on-site activities that cannot be performed remotely.
- Perform key-generation, key-component handling, secure storage, and distribution in accordance with split-custody and dual-control processes.
- Maintain complete inventories of HSMs, key tokens, smartcards, and tamper-evident packaging.
- Support enterprise data-protection tools and cloud-based key/secret-management platforms.
- Assist application teams with encryption integrations, configuration updates, and secure data-flow enablement.
- Monitor and maintain operational health, alerting, and compliance posture for encryption services across hybrid environments.
- Ensure that all cryptographic operations align with internal standards and regulatory obligations.
- Ensure all HSM and key-management activities meet PCI DSS, PCI PIN, FIPS 140-2/3, and internal cybersecurity standards.
- Maintain detailed audit trails, logs, and procedural documentation for all cryptographic operations.
- Support internal and external audits by providing evidence, participating in walkthroughs, and ensuring timely remediation.
- As a Cybersecurity Analyst Senior, you will be working closely with Cybersecurity, Payments Engineering, Data Center Operations, Cloud teams, and external partners to ensure secure and timely delivery of key-management services.
- Participate in change-control processes, incident response, and coordinated maintenance windows for HSM-related work.
- Provide SME support regarding cryptographic practices, secure-data handling, and encryption technologies.
What you will need:
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or equivalent experience.
- 5-7 years of experience in cybersecurity, cryptography, or payment-security operations.
- Hands-on experience with HSMs (e.g., Payshield, Luna, Atalla) and key-management procedures.
- Understanding of PCI DSS, PCI PIN, FIPS 140-2/3, and secure key-handling standards.
- Familiarity with enterprise encryption and data-protection tools (CipherTrust, Voltage, cloud KMS).
- Ability to work in secure data-center environments under dual-control and high-assurance protocols.
- Strong communication, documentation, and troubleshooting skills.
Added bonus if you have:
- CISSP Certification
- Experience using data protection tools such as Voltage and CipherTrust
What we offer you:
- Flexible and creative work environment
- Diverse and collaborative atmosphere
- Professional and personal development resources
- Opportunities to volunteer and support charities
- Competitive salary and benefits
Cyber Security Engineer Senior in London employer: FIS, Inc.
Contact Detail:
FIS, Inc. Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Security Engineer Senior in London
✨Tip Number 1
Network like a pro! Reach out to folks in the fintech and cybersecurity space on LinkedIn. Join relevant groups, attend webinars, and don’t be shy about asking for informational interviews. You never know who might have the inside scoop on job openings!
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects related to HSMs, encryption, or data protection. This gives potential employers a tangible look at what you can do and sets you apart from the crowd.
✨Tip Number 3
Prepare for those interviews! Research common questions for Cyber Security Engineer roles and practice your answers. Be ready to discuss your hands-on experience with HSMs and key management procedures, as well as your understanding of compliance standards like PCI DSS.
✨Tip Number 4
Apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our team at FIS. Don’t miss out on the chance to be part of something big!
We think you need these skills to ace Cyber Security Engineer Senior in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Cyber Security Engineer role. Highlight your experience with HSMs, key management, and any relevant certifications. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cybersecurity and how you can contribute to our Data Protection Team. Keep it concise but impactful – we love a good story!
Showcase Your Technical Skills: Don’t forget to mention your hands-on experience with tools like CipherTrust and Voltage. We’re keen on seeing your technical prowess, so be specific about your achievements and how they relate to the job.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you’re serious about joining our team!
How to prepare for a job interview at FIS, Inc.
✨Know Your HSMs Inside Out
Make sure you’re well-versed in the specific HSMs mentioned in the job description, like Payshield and Luna. Brush up on their functionalities, key-management procedures, and any recent updates or firmware changes. This will show your technical expertise and genuine interest in the role.
✨Understand Compliance Standards
Familiarise yourself with PCI DSS, PCI PIN, and FIPS 140-2/3 standards. Be prepared to discuss how these regulations impact cryptographic operations and data protection. Showing that you understand compliance will demonstrate your readiness to handle sensitive data responsibly.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving skills in real-world scenarios. Think of examples where you’ve successfully managed key-generation processes or handled security incidents. Use the STAR method (Situation, Task, Action, Result) to structure your responses clearly.
✨Showcase Your Teamwork Skills
Since this role involves collaboration with various teams, be ready to share experiences where you’ve worked effectively with others, especially in high-pressure situations. Highlight your communication skills and how you’ve contributed to a team’s success in cybersecurity projects.