Cybersecurity Engineer, M&A Automation

Visa•Austin, TX

2d•Hybrid

About The Position

Cybersecurity is at the beating heart of our culture. Our diligence and expertise is what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Cybersecurity team, poised to defend us against any potential cyber threats. We’re looking for those of you who are inherently driven and fascinated by the art and science of cybersecurity and more specifically, mergers and acquisitions with a specific focus on Cybersecurity integration. We’ll equip you with the very best tools and tech so that you can deliver top notch results. Continuous self-development underpins job fulfilment at Visa. As a Cybersecurity Engineer within the Cybersecurity M&A Team, you are uniquely placed to utilize and grow your engineering and defense skills across a myriad of security technologies. Your role will cover: Cyber Engineering: · Deploy and maintain security infrastructure: IDS, FIM, WAF, SASE, firewalls, web proxies, vulnerability scanners · Implement cloud security controls and automate security workflows · Develop SIEM correlation rules, dashboards, and alerts to detect cyber-attacks · Manage IAM solutions including Active Directory, SSO, and MFA · Apply expertise in network protocols and DDoS mitigation · Collaborate across cybersecurity and engineering teams to meet business requirements Cyber Defense and Incident Response: · Monitor and triage security alerts via SIEM, escalating and documenting incidents per operational procedures · Analyze sensor data (AV, IDS, Windows events, web proxy logs) to establish context and eliminate false positives · Contain and mitigate threats using approved incident response methodologies · Support time-critical investigations and collaborate with cross-functional teams · Operationalize threat intelligence from internal and external sources · Identify emerging threats, trends, and technologies impacting business security · Provide feedback to enhance detection capabilities and security posture · Respond to security incident reports via multiple communication channels This is a hybrid position. Expectation of days in office will be confirmed by your Hiring Manager.

Requirements

2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience

Nice To Haves

3 or more years of work experience with a Bachelor’s Degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field
Cybersecurity certifications (CISSP, CEH, OSCP, GSEC, GCIH, GCIA, GCED, GCFA, CySA+)
Enterprise-level incident response and security operations experience
Hands-on cybersecurity incident handling with associated IR tools
Proficiency with security tools: SIEM, AV, WAF, IDS, Netflow, packet analyzers, EDR
Deep knowledge of malware families and network attack vectors
Strong TCP/IP, networking, and packet analysis skills
Operating systems, network services, and application security knowledge
Web application vulnerabilities (XSS, CSRF, SQL injection, DoS, API attacks)
OWASP Top 10 and DDoS mitigation strategies
Cloud security best practices and multi-tenant SaaS environments
Regulatory framework knowledge (PCI DSS, ISO27001, ISAE3402)
DevSecOps, CI/CD, containerization, and automation experience
Strong interest and experience in AI/ML for cybersecurity applications (professional, academic, or personal projects)
Programming and scripting proficiency for security automation
Familiarity with machine learning algorithms, frameworks, and AI models in security contexts
Experience with LLMs for threat analysis, automation, or security workflows (preferred)
Exceptional problem-solving abilities with tenacity and resilience
Strong communication and presentation skills across diverse audiences
Leadership and interpersonal skills to build credibility and influence peers

Responsibilities

Deploy and maintain security infrastructure: IDS, FIM, WAF, SASE, firewalls, web proxies, vulnerability scanners
Implement cloud security controls and automate security workflows
Develop SIEM correlation rules, dashboards, and alerts to detect cyber-attacks
Manage IAM solutions including Active Directory, SSO, and MFA
Apply expertise in network protocols and DDoS mitigation
Collaborate across cybersecurity and engineering teams to meet business requirements
Monitor and triage security alerts via SIEM, escalating and documenting incidents per operational procedures
Analyze sensor data (AV, IDS, Windows events, web proxy logs) to establish context and eliminate false positives
Contain and mitigate threats using approved incident response methodologies
Support time-critical investigations and collaborate with cross-functional teams
Operationalize threat intelligence from internal and external sources
Identify emerging threats, trends, and technologies impacting business security
Provide feedback to enhance detection capabilities and security posture
Respond to security incident reports via multiple communication channels