Sr. Cybersecurity Engineer

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

Role Summary:
The Senior Cloud Security Analyst is responsible for securing Pismo's cloud-native infrastructure, platforms, and services through the design, implementation, monitoring, and continuous improvement of cloud security capabilities. This role works closely with Engineering, Site Reliability Engineering (SRE), Infrastructure, IAM, Security Architecture, Product Security, and Governance, Risk & Compliance teams to ensure cloud environments remain secure, resilient, and aligned with internal security standards, Visa requirements, and regulatory obligations.

The successful candidate will serve as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation. The role supports strategic security initiatives while helping maintain compliance with industry standards and client commitments

Key Responsibilities:

• Monitor and improve the security posture of cloud environments and supporting infrastructure.
• Investigate and respond to security alerts, suspicious activities, and cloud security incidents.
• Support detection engineering efforts and continuously improve security monitoring capabilities.
• Conduct threat analysis and collaborate with incident response teams during investigations.
• Develop and maintain operational security metrics, dashboards, and reporting.

Cloud Security Architecture:

• Review cloud architectures and provide security guidance during design and implementation phases.
• Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.
• Assess new technologies and cloud services for security risks and compliance requirements.
• Support implementation of security controls across cloud-native and containerized environments.

Identity & Access Management:

• Review and monitor privileged access within cloud environments.
• Support implementation of least-privilege and role-based access control models.
• Identify excessive permissions and work with stakeholders to remediate access risks.
• Collaborate with IAM teams to strengthen authentication, authorization, and credential management processes.

Vulnerability & Configuration Management:

• Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.
• Perform security assessments of cloud resources and configurations.
• Validate compliance with secure configuration baselines and security standards.
• Work with engineering teams to remediate security findings within agreed timelines.

Security Automation & DevSecOps:

• Support implementation of automated security controls within CI/CD pipelines.
• Enhance infrastructure-as-code security practices and automated compliance monitoring.
• Develop security use cases and automation playbooks to improve operational efficiency.
• Participate in initiatives leveraging AI and automation to improve security operations and risk management activities.

Compliance & Risk Management:

• Support audits, certification programs, and client security assessments.
• Provide technical evidence and documentation for compliance initiatives, including ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks.
• Conduct cloud security risk assessments and support remediation planning.
• Assist with implementation and validation of security controls required by internal policies and regulatory requirements.

Cross-Functional Collaboration:

• Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams to drive security improvements.
• Participate in cloud security projects and strategic security initiatives.
• Contribute to security awareness and knowledge-sharing activities.
• Mentor junior analysts and support development of cloud security capabilities across the organization.
  

This is a hybrid position. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

Basic Qualifications:

• 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience

Preferred Qualifications:

• 6 or more years of work experience with a Bachelor's Degree or 4 or more years of relevant experience with an Advanced Degree (e.g., Master's, MBA, JD, MD) or up to 3 years of relevant experience with a PhD.
• Minimum 5 years of experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.
• Hands-on experience securing AWS cloud environments, including network security, IAM, encryption, logging, monitoring, and security services.
• Experience implementing and operating cloud security controls across at least one major cloud platform: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)
• Strong understanding of cloud-native security principles, including: Identity and Access Management (IAM), Key Management and Encryption, Network Segmentation and Security, Container and Kubernetes Security, Infrastructure as Code (IaC), DevSecOps practices
• Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.
• Experience conducting cloud security assessments, risk assessments, and security control reviews.
• Experience supporting Information Assurance (IA), audit readiness, compliance assessments, and control validation activities.
• Knowledge of security frameworks and standards including ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and NIST Cybersecurity Framework.
• Strong communication, stakeholder management, and technical documentation skills.
• Experience with multiple cloud providers (AWS, Azure, and/or GCP).
• AWS Certified Security – Specialty.
• AWS Solutions Architect Associate/Professional.
• Microsoft Certified: Azure Security Engineer Associate.
• CISSP, CCSP, CISM, CRISC, or GIAC certifications.
• Experience within banking, payments, fintech, or other highly regulated industries.
• Experience supporting PCI DSS, PCI PIN Security, SOC, ISO 27001, and regulatory examinations.

Information for US Applicants

For roles located in the US, the estimated salary range for this position is $133.300,00 to $ 213.400,00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.

Work Hours

Varies upon the needs of the department.

Travel Requirements

This position requires travel 5-10% of the time.

Mental/Physical Requirements

This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.