Application Security Engineer
VISA · London, England, United Kingdom ·
- Work mode
- Onsite
- Category
- Security
- Visa sponsorship
- Yes
- Company size
- 1000+
An Application Security Engineer at Visa assesses vulnerabilities in payment systems, guides developers on secure coding, and enforces security standards using tools like SAST, DAST, and SCA.
About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Application Security Engineer will play a key role within the Application Security team, providing hands-on technical expertise, guidance, and enablement to development teams across Featurespace. This position is responsible for enhancing application security by assessing vulnerabilities, promoting secure development methods, offering guidance on remediation, and making sure Visa’s security standards and requirements are met.
This position requires strong technical capability, excellent communication skills, and the ability to work collaboratively across engineering, product, and security stakeholders.
Core Responsibilities:
Application Security & Vulnerability Support:
- Review and triage findings from application security tooling, including SAST, DAST, SCA, and container scanning solutions.
- Provide technical guidance to development teams to support remediation of vulnerabilities and improve security posture.
- Conduct or support penetration testing and targeted security assessments where appropriate.
- Review and escalate critical application security risks to the appropriate technical and business stakeholders.
Secure Development & Engineering Partnership:
- Support engineering teams in understanding and meeting Visa security standards and requirements.
- Provide coaching, best practices, and security knowledge sharing to promote secure development across the organization.
- Deliver training sessions for technical and non‑technical groups on application security topics and processes.
Process & Governance:
- Contribute to continuous improvement of application security processes, tooling, and standards.
- Support exception management, including reviewing risk acceptance submissions and documenting decisions.
- Assist with compliance and evidencing requirements related to application security activities.
Collaboration & Communication:
- Partner closely with development, DevOps, infrastructure, and product stakeholders to drive secure design and remediation outcomes.
- Share expertise and mentor other members of the Application Security team.
- Participate in relevant cross-functional forums (e.g., BCWG) where application security topics arise.
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.