Cybersecurity Engineer

Visa•Foster City, CA

55d•$137,400 - $212,500•Hybrid

About The Position

Cybersecurity is at the heart of our culture. Our diligence and expertise are what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Security Architecture team, poised to defend us against any potential cyber threats. We’re looking for those of you who are inherently driven and fascinated by the art and science of cyber defense. As a leader in global payments, Visa faces unique and complex cybersecurity challenges. The rapid pace of technological advancement necessitates a forward-looking approach to cybersecurity that goes beyond traditional methods. Maintaining our leadership position in cybersecurity requires continuous researching and prototyping new security technologies. As Cybersecurity Engineer and Security Architect, you’ll work with a group of enterprise and application security architects, along with security researchers to lead the advanced prototyping to accelerate time-to-market of new and exciting cybersecurity research and innovative ideas and proposals. We’ll arm you with the very best tools and tech so that you can deliver top notch results. Development underpins job fulfilment at Visa. As Cybersecurity Engineer, you’ll be enthused by getting stuck on various defense and security related projects, as well as the chance to work with people from a range of disciplines, as well as colleagues and clients at every level.

Requirements

2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience.
Agentic AI Development experience
Experience in developing highly available and scalable enterprise services using Python. Experience with Java, Go, Rust or any other object-oriented programming language.
hands-on experience with GenAI technologies — including LLMs, prompt engineering, embeddings, fine-tuning, and AI agents or agentic pipelines.
Cybersecurity training or education.

Nice To Haves

2 - 5 years of relevant work experience.
1 year of Agentic AI Development experience
Cybersecurity training or education.
Bachelor’s degree in computer science (or equivalent) from an accredited university.
Minimum of 3+ years of experience in developing highly available and scalable enterprise services using Python. Experience with Java, Go, Rust or any other object-oriented programming language is a plus.
1+ years of hands-on experience with GenAI technologies — including LLMs, prompt engineering, embeddings, fine-tuning, and AI agents or agentic pipelines.
Strong software engineering background with experience in Python, PyTorch, TensorFlow, or JAX..
Hands-on experience with LLMs (e.g., GPT, Claude, Mistral), vector databases (e.g., FAISS, Pinecone), and orchestration tools (e.g., LangChain, LangGraph, Autogen).
Hands-on experience with design and development tools like IntelliJ, VSCode, Postman, and Jupyter.
Expertise in evaluating various large language models (LLMs), assessing their performance, and comparing their capabilities to identify suitable models based on business requirements.
Hands-on experience with AI model APIs and AI agent frameworks.
Proficiency in modern backend architectures, including cloud-native development (e.g., AWS, GCP, Azure), containerization (Docker/Kubernetes), and distributed systems.
Proficiency in working with both RDBMS and NoSQL databases.
Proven ability to build Threat Models and analyze security weaknesses in complex deployments with varying technology stack
Expertise in securing the integration of multiple environments across on-premises, multi-cloud, and hybrid architectures. Strong understanding of application and network security.
Good understanding of current compliance, regulatory and legal requirements relevant to the transaction processing industry such as PCI, HIPPA, SOX, and GLB.
Ability to multi-task in a dynamic and fast paced environment.
Solid understanding of software development best practices and principles.
Experience with Agile methodologies and practices.
Strong analytical and problem-solving skills with attention to detail.
Excellent communication skills, both written and verbal, to effectively collaborate with cross-functional teams.

Responsibilities

Be a product security champion by driving Security Architecture and Design/implementation/optimization for Web, API and Mobile, AI Agent applications across Visa.
Engage in the initial requirements definition including analysis of threats and risks and alignment with Visa security, Engineering, IT and Architecture standards.
Conduct and facilitate security reviews, threat modelling including deep design reviews throughout the development lifecycle.
Facilitate "table-top"/red-team/scenario analysis exercises in conjunction with other SME's, and plan the resolution of any identified vulnerabilities/issues
Develop proof-of-concept prototypes and scalable enterprise products for promising cybersecurity solutions leveraging AI/ML, ensuring alignment with Visa’s existing security architecture and strategic goals.
Identify and assess innovative cybersecurity tools, companies, and concepts that can enhance Visa’s security architecture.
Work closely with internal stakeholders, including the Cybersecurity Product Development team, to transition prototypes into fully operational products and solutions.
Automate security tools and processes to advance security capabilities across key cybersecurity areas, including access control, defense-in-depth, secure coding practices, and AI agent governance.
Continuously monitor and analyze emerging cybersecurity trends, technologies, and practices that have the potential to impact Visa’s security posture.
Stay up to date on new security tools & techniques in the information security space.
Enabling/building security on various platforms and technologies which protect the applications from attacks like: Payment processing platforms, Payment Wallet solutions, Consumer facing applications, COTS products deployed in house, public clouds, Issuer/Acquirer facing platforms and applications, white labelled solutions for partners.
Working with technologies including: zTPF, zOS, MVS, Linux, Windows, VMWare, Openstack, SDN, Public cloud like AWS, Google
Working with Cybersecurity tools like IDS, SIEM, Tripwire, Tanium, Netwitness, Netflow, WAF
Working with HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc
Working with Web technologies like HTTP, SOAP, REST services, AJAX
Working with Databases like Oracle, MS SQL, Couchbase, Cassandra, Riak, Aerospike
Working with Caching services like Kafka, Coherence, MQ
Working with Big-data like Hadoop
Working with Web Access Management solutions like Forgerock, Siteminder, Custom/in-house Security Frameworks.