Senior Cybersecurity Engineer

Senior Cloud Security Analyst

About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

The Senior Cloud Security Analyst is responsible for securing Pismo's cloud-native infrastructure, platforms, and services through the design, implementation, monitoring, and continuous improvement of cloud security capabilities. This role works closely with Engineering, Site Reliability Engineering (SRE), Infrastructure, IAM, Security Architecture, Product Security, and Governance, Risk & Compliance teams to ensure cloud environments remain secure, resilient, and aligned with internal security standards, Visa requirements, and regulatory obligations.

The successful candidate will serve as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation. The role supports strategic security initiatives while helping maintain compliance with industry standards and client commitments.

Key Responsibilities:

• Monitor and improve the security posture of cloud environments and supporting infrastructure.
• Investigate and respond to security alerts, suspicious activities, and cloud security incidents.
• Support detection engineering efforts and continuously improve security monitoring capabilities.
• Conduct threat analysis and collaborate with incident response teams during investigations.
• Develop and maintain operational security metrics, dashboards, and reporting.

Cloud Security Architecture

• Review cloud architectures and provide security guidance during design and implementation phases.
• Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.
• Assess new technologies and cloud services for security risks and compliance requirements.
• Support implementation of security controls across cloud-native and containerized environments.

Identity & Access Management

• Review and monitor privileged access within cloud environments.
• Support implementation of least-privilege and role-based access control models.
• Identify excessive permissions and work with stakeholders to remediate access risks.
• Collaborate with IAM teams to strengthen authentication, authorization, and credential management processes.

Vulnerability & Configuration Management

• Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.
• Perform security assessments of cloud resources and configurations.
• Validate compliance with secure configuration baselines and security standards.
• Work with engineering teams to remediate security findings within agreed timelines.

Security Automation & DevSecOps

• Support implementation of automated security controls within CI/CD pipelines.
• Enhance infrastructure-as-code security practices and automated compliance monitoring.
• Develop security use cases and automation playbooks to improve operational efficiency.
• Participate in initiatives leveraging AI and automation to improve security operations and risk management activities.

Compliance & Risk Management

• Support audits, certification programs, and client security assessments.
• Provide technical evidence and documentation for compliance initiatives, including ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks.
• Conduct cloud security risk assessments and support remediation planning.
• Assist with implementation and validation of security controls required by internal policies and regulatory requirements.

Cross-Functional Collaboration

• Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams to drive security improvements.
• Participate in cloud security projects and strategic security initiatives.
• Contribute to security awareness and knowledge-sharing activities.
• Mentor junior analysts and support development of cloud security capabilities across the organization.

This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice.

Qualifications

Basic Qualifications:

• 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.

Preferred Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Minimum 5 years of experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.
• Hands-on experience securing AWS cloud environments, including network security, IAM, encryption, logging, monitoring, and security services.
• Experience implementing and operating cloud security controls across at least one major cloud platform:
• Amazon Web Services (AWS)
• Microsoft Azure
• Google Cloud Platform (GCP)
• Strong understanding of cloud-native security principles, including:
• Identity and Access Management (IAM)
• Key Management and Encryption
• Network Segmentation and Security
• Container and Kubernetes Security
• Infrastructure as Code (IaC)
• DevSecOps practices
• Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.
• Experience conducting cloud security assessments, risk assessments, and security control reviews.
• Experience supporting Information Assurance (IA), audit readiness, compliance assessments, and control validation activities.
• Knowledge of security frameworks and standards including ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and NIST Cybersecurity Framework.
• Strong communication, stakeholder management, and technical documentation skills.
• Experience with multiple cloud providers (AWS, Azure, and/or GCP).
• AWS Certified Security – Specialty.
• AWS Solutions Architect Associate/Professional.
• Microsoft Certified: Azure Security Engineer Associate.
• CISSP, CCSP, CISM, CRISC, or GIAC certifications.
• Experience within banking, payments, fintech, or other highly regulated industries.
• Experience supporting PCI DSS, PCI PIN Security, SOC, ISO 27001, and regulatory examinations.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.