Sr. Cybersecurity Engineer

Company Description

Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

Job Description

What's it all about? Cybersecurity is at the beating heart of our business. Our diligence and expertise is what makes us the undisputed leader in electronic payments. We've made it our priority to create a top-tier Cybersecurity team, poised to defend us against any potential cyberthreats. We're looking for those of you who are inherently driven and fascinated by the art and science of cybersecurity. We'll equip you with the very best tools and tech so that you can deliver top notch results.

Essential Functions

• Primarily responsible for maintaining test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers.

• Creates and implements methods and procedures for inspecting, testing, and evaluating the security, effectiveness, and health of products and production equipment.

• Effectively choose the appropriate standards, processes, procedures, and tools throughout the system development life cycle to support the generation of the security engineering products.

• Design technical, operational, and organizational controls to maintain acceptable security posture for the organization.

• WAF and Anti-DDoS technology configuration and deployment.

• Assist with the design, deployment, and administration of a multi-site, distributed SIEM environment. Including Universal Forwarders, Deployer, and Deployment Server.

• Ensure scheduled scans are covering 100% of intended assets and are being run successfully.

• Provide guidance on vulnerability and malware remediation.

• Configure, operate, and maintain Data Loss Prevention (DLP) tool suites.

• Identify potential conflicts with implementation of any cyber security tools within the enterprise and develop recommendations to remediate these conflicts.

• Provide Tier 3 maintenance support for deployed cyber security technologies.

• Assist with periodic and regular security assessments.

• Assist with the development and maintenance of information security policies, standards, and control procedures to enable compliance with PCI.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Qualifications

Basic Qualifications:

• 5+ years of relevant work experience with a Bachelor’s Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.


Preferred Qualifications:

• 6 or more years of work experience with a Bachelors Degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD
• Strong understanding of TCP/IP.
• Experience with Powershell, Ansible, and/or other automation tools.
• Strong experience with Cybersecurity Framework (CSF) and NIST Special Publications.
• Solid experience with Cybersecurity strategies and frameworks to protect data assets.
• Strong experience on protections for data at rest, data in transit, and data in memory.
• Familiarity with Key Management and Hardware Security Modules (HSM).
• Understanding and experience with the cryptography algorithms, and public key infrastructure (PKI).
• Verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills along with the ability to present complex security subjects to internal work groups and projects.

Additional Information

Work Hours: Varies upon the needs of the department.