Senior Cybersecurity Engineer

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa , you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description

The Senior Cloud Security Analyst is responsible for securing Pismo's cloud-native infrastructure, platforms, and services through the design, implementation, monitoring, and continuous improvement of cloud security capabilities. This role works closely with Engineering, Site Reliability Engineering (SRE), Infrastructure, IAM, Security Architecture, Product Security, and Governance, Risk & Compliance teams to ensure cloud environments remain secure, resilient, and aligned with internal security standards, Visa requirements, and regulatory obligations.

The successful candidate will serve as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation. The role supports strategic security initiatives while helping maintain compliance with industry standards and client commitments
Key Responsibilities:

- Monitor and improve the security posture of cloud environments and supporting infrastructure.

- Investigate and respond to security alerts, suspicious activities, and cloud security incidents.

- Support detection engineering efforts and continuously improve security monitoring capabilities.

- Conduct threat analysis and collaborate with incident response teams during investigations.

- Develop and maintain operational security metrics, dashboards, and reporting.

Cloud Security Architecture

- Review cloud architectures and provide security guidance during design and implementation phases.

- Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.

- Assess new technologies and cloud services for security risks and compliance requirements.

- Support implementation of security controls across cloud-native and containerized environments.

Identity & Access Management

- Review and monitor privileged access within cloud environments.

- Support implementation of least-privilege and role-based access control models.

- Identify excessive permissions and work with stakeholders to remediate access risks.

- Collaborate with IAM teams to strengthen authentication, authorization, and credential management processes.

Vulnerability & Configuration Management

- Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.

- Perform security assessments of cloud resources and configurations.

- Validate compliance with secure configuration baselines and security standards.

- Work with engineering teams to remediate security findings within agreed timelines.

Security Automation & DevSecOps

- Support implementation of automated security controls within CI/CD pipelines.

- Enhance infrastructure-as-code security practices and automated compliance monitoring.

- Develop security use cases and automation playbooks to improve operational efficiency.

- Participate in initiatives leveraging AI and automation to improve security operations and risk management activities.

Compliance & Risk Management

- Support audits, certification programs, and client security assessments.

- Provide technical evidence and documentation for compliance initiatives, including ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks.

- Conduct cloud security risk assessments and support remediation planning.

- Assist with implementation and validation of security controls re