About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
Cybersecurity is at the beating heart of our culture. Our diligence and expertise are what make us the undisputed leader in electronic payments. We've made it our priority to create a top-tier Cyber Engineering & Operations team, poised to defend us against any potential cyber threats. We're looking for those of you who are inherently driven and fascinated by the art and science of Cybersecurity. We'll arm you with the very best tools and tech so that you can deliver top notch results.
We are seeking a Cybersecurity Analyst with a strong development background to join our security team. In this role, you will drive the identification, prioritization, and remediation of vulnerabilities across our cloud-native infrastructure, containerized workloads, and application environments. You will combine hands-on engineering skills with security expertise to build automation, improve scanning coverage, and partner with engineering teams to reduce risk at scale.
Essential Functions:
- Be a vulnerability management champion by driving the discovery, assessment, prioritization, and remediation of vulnerabilities across cloud, container, and host infrastructure at Visa.
- Own the lifecycle management of security scanning including deployment, configuration, coverage expansion, policy tuning, upgrades, and ongoing optimization to ensure accurate and complete scanning across all environments.
- Conduct and facilitate vulnerability assessments, scan result analysis, and finding validation throughout the development and deployment lifecycle; eliminate false positives and provide clear, actionable remediation guidance to development and platform teams.
- Integrate vulnerability scanning into CI/CD pipelines in conjunction with engineering teams to enable shift-left security, establishing security gates, image policies, and automated checks that prevent vulnerable images from reaching production.
- You'll be working on securing and assessing various platforms and technologies which protect Visa's environments from vulnerabilities and attacks like:
- Cloud platforms like AWS, Azure, GCP, including cloud-native services, IAM, and CSPM practices
- Container and orchestration technologies like Docker, Kubernetes, container registries, admission controllers, and runtime security
- Vulnerability management tools like Qualys, Prisma Cloud, Tenable, Rapid7, Wiz, Trivy, Grype
- CI/CD and DevOps tooling like Jenkins, GitHub Actions, GitLab CI, Artifactory
- Programming and automation languages like Python, Bash, Go, and REST API integrations
- AI/ML and LLM-based tools like AI coding assistants, automated triage engines, and security copilots
- Threat and exploitability intelligence sources like EPSS, CISA KEV, CVE/CVSS, vendor advisories
- Automate security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of vulnerability triage, enrichment, ticketing, remediation orchestration, and metrics/reporting.
- Apply risk-based prioritization leveraging threat intelligence, exploitability data, and asset criticality to provide recommended countermeasures or mitigating controls that reduce risk to an acceptable and manageable level.
- Track and report on vulnerability metrics, SLAs, and remediation trends for engineering leadership, security management, and compliance stakeholders.
- Help business and product teams achieve and maintain various compliance certifications like PCI DSS, SOC 2, ISO 27001, etc.
Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.
Qualifications
Basic Qualifications:
- 2+ years of relevant work experience and a Bachelor’s degree OR 5+ years of relevant work experience. Masters graduates must have 2+ years of relevant work experience to qualify.
Preferred Qualifications:
- 3 or more years of work experience with a bachelor’s degree or 2 or more years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD).
- Have hands-on experience in vulnerability management, application security, or a related security engineering role, with a strong development background.
- Have proficiency in Python for scripting, automation, and API integrations to streamline security workflows.
- Have solid experience with containers (Docker or similar), including image scanning, hardening, and registry security.
- Working knowledge of Kubernetes, including architecture, workloads, security configurations, and common misconfigurations.
- Experience securing and assessing cloud environments (AWS, Azure, or GCP), including cloud-native services and Identity and Access Management concepts.
- A proven record of accomplishment working with vulnerability scanning and management tools such as Prisma Cloud, Qualys, Tenable, Rapid7, Wiz, Trivy, Grype, etc.
- Strong understanding of CVE/CVSS scoring, exploitability analysis, and risk-based prioritization.
- Familiarity with CI/CD tooling (e.g. Jenkins, GitHub Actions, GitLab CI) and integrating security scanning into pipelines to support shift-left practices.
- Have experience applying AI/ML or LLM-based tools to security workflows, such as automated vulnerability triage, false-positive reduction, or remediation recommendations, and familiarity with securing AI/ML systems (e.g. OWASP Top 10 for LLMs).
- Relevant certifications such as CKS, CKA, AWS/Azure/GCP security certifications, OSCP, GCSA, or CISSP.
- Experience working in the payments industry or other regulated environments such as financial services, healthcare, or government.
- Strong communication and stakeholder management skills, with the ability to explain technical risk to both engineers and non-technical audiences.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.