PSIRT (Product Security Incident Response Team) Engineer

Job Description

Worldpay is a global leader in payment processing, providing innovative and secure payment processing services to businesses of all sizes. As we continue to grow, we’re looking for people who are passionate about payments to chart Worldpay’s path to being the largest payments company in the world.

Team overview:

The Worldpay Product Security Incident Response Team (PSIRT) is seeking a highly motivated engineer to play a vital role in safeguarding our products from security vulnerabilities. You will work alongside security researchers, developers, and other stakeholders to identify, analyze, and respond to product security incidents effectively.

 

About this role:

As a PSIRT engineer, you will be responsible for the security of the applications that the Worldpay teams build.  In this role, you will play a critical role in safeguarding our organization's digital infrastructure by adeptly responding to product security incidents.

 

What you’ll do:

• Collaborate with security researchers and external parties to receive, triage, and validate reported vulnerabilities in our products.

• Analyze vulnerabilities to assess their severity, exploitability, and potential impact on our products and users.

• Work with development teams to develop and implement remediation strategies for identified vulnerabilities, including patches, hotfixes, or workarounds.

• Maintain and update PSIRT documentation, including policies, procedures, and playbooks.

• Contribute to the continuous improvement of the PSIRT process by identifying opportunities for automation and efficiency.

• Stay up-to-date on the latest vulnerability trends, exploit techniques, and industry best practices for product security.

What you’ll bring:

• Minimum 3+ years of experience in security or a related field.

• Strong understanding of software development lifecycle (SDLC) security practices.

• Experience with vulnerability analysis and mitigation techniques.

• Excellent analytical and problem-solving skills.

• Ability to work effectively in a fast-paced environment and manage multiple priorities.

• Experience with scripting languages (Python, Bash) for automation preferred.

• Excellent communication, collaboration, and interpersonal skills.

 

Added bonus if you have:

• Experience in reverse engineering and exploit development.

• Experience with secure coding principles and practices.

• Familiarity with industry standards for vulnerability disclosure (e.g., CVE, CVSS).

• Experience with vulnerability management tools.

• Certifications in security (e.g., Certified Ethical Hacker (CEH), Security+).

FIS is committed to providing its employees with an exciting career opportunity and competitive compensation. The pay range for this full-time position is $77,100.00 - $125,680.00 and reflects the minimum and maximum target for new hire salaries for this position based on the posted role, level, and location. Within the range, actual individual starting pay is determined additional factors, including job-related skills, experience, and relevant education or training. Any changes in work location will also impact actual individual starting pay. Please consult with your recruiter about the specific salary range for your preferred location during the hiring process.

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

EEOC Statement

FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here s