I am currently working for a small company that provides aggregated flight data via an API. I am charged with helping the origination become PCI DSS complaint. The learning curve is steep but I find IT security fascinating and have become obsessed by security and making sure my company is as safe it can get.