Cybersecurity Engineer, Mobile & AI Application

Visa•Austin, TX

10d•$118,700 - $183,600•Hybrid

About The Position

Visa’s Mobile & Mac Security (MMS) team is seeking a Cybersecurity Engineer to help protect Visa’s mobile and Mac consumer and corporate products and services. The team operates as a flexible, fast-paced group within Visa’s Cybersecurity department and performs ethical hacking, security assurance, and application security work. The position is based in Austin, Texas, and is hybrid; the Hiring Manager will confirm the expected number of office days. The engineer will contribute to internal cybersecurity tools, conduct ethical penetration testing, identify and address security weaknesses, and build application security capabilities. The role includes applying AI to team processes, working with cloud platforms, developing automated testing tools, and establishing security practices for mobile products and emerging technologies. The position also involves collaborating with product, solution, and application development teams to incorporate security into design and software delivery, assess and reduce risk, and communicate actionable security metrics. The role requires proficiency with AI technologies, protocols, and development tooling, as well as knowledge of mobile application and platform security, OWASP Top 10, and CWE 25. Candidates should bring relevant programming, penetration-testing, risk-assessment, and application-security skills. The role requires 5–10% travel and is performed in an office setting, with frequent use of computers and standard office equipment.

Requirements

At least 2 years of relevant work experience and a bachelor’s degree, or at least 5 years of relevant work experience. Master’s graduates must have at least 2 years of relevant work experience.
Strong experience with one or more of Node, Python, Java, or Swift; these languages are strongly preferred.
Proficiency with current AI technologies, protocols, and AI-development tooling; the posting specifically mentions Claude Code, Pi agent, and Codex, and understanding MCP and related protocols.
Experience with both cloud and local LLM models.
Understanding of the OWASP Top 10 and CWE 25, with a proven track record implementing and integrating remediation strategies.
Understanding of mobile application and platform security concepts.
Excellent penetration-testing, application-risk-assessment, and risk-categorization skills, including reverse engineering, network interception and manipulation, offensive and defensive attacks, and database and cross-site scripting injection attacks.
Deep understanding of common web application architectures, development frameworks, and web protocols.
Familiarity with agile development and experience integrating secure development practices into the process.
Effective communication and proper written grammar.
Solid problem-solving and analytical skills, including the ability to assess issues and recommend appropriate solutions.
Self-motivated and able to work independently.
Demonstrated leadership qualities, flexibility, and adaptability to changing roles and responsibilities.
Strong operational skills and a quality- and results-oriented approach.
Strong client-service orientation.
Ability to negotiate and build consensus across differing product-development and solution-team priorities.
Comfort working with a remote-management dynamic.

Nice To Haves

Three or more years of work experience with a bachelor’s degree, or more than two years of work experience with an advanced degree (e.g., master’s, MBA, JD, or MD).
Two to three or more years of professional experience in a cybersecurity-related field.
Strong experience with Docker and containerized deployments.
Deep understanding of mobile platforms and advanced concepts related to SDKs and mobile wallets.
Experience with security tools and technologies such as Burp Suite, IDA Pro, APKTool, Hopper, HP Fortify, Checkmarx (SAST/DAST), Cycript, XPosed, Charles, dex2jar, Kali Linux, Wireshark, or other mobile-security or penetration-testing tools and frameworks.
Bi- or multilingual ability.
Strategic, visionary, and innovative approach.

Responsibilities

Help develop, maintain, support, and innovate internal cybersecurity tools.
Perform ethical penetration testing on Visa mobile and Mac assets to simulate real-world security vulnerabilities and scenarios.
Create mobile security guidelines, requirements, and standards for mobile product development and enterprise mobile deployment, and proactively mitigate information-security risks.
Use AI to create, enhance, optimize, and implement team and business-as-usual processes.
Implement solutions within internal cloud platforms.
Analyze security gaps in mobile technologies and frameworks and incorporate remediation practices to reduce risk to Visa products and assets.
Develop tools and frameworks for advanced mobile security assurance and ethical hacking activities.
Research mobile platform releases, capabilities, and functionalities to establish mobile security standards.
Define, implement, and scale mobile security practices across Visa technology projects throughout planning and delivery.
Integrate architectural risk assessment and threat modeling of large-scale enterprise applications and infrastructure into the Software Development Lifecycle.
Test Visa products hands-on, develop threat hypotheses, advise on risk remediation, and champion secure implementation efforts.
Improve secure coding practices, application-security requirements, automation, training, and metrics.
Build cross-organizational relationships and influence staff across the IT organization and broader enterprise.
Collaborate proactively with product development and solution teams to manage software security risk in alignment with business goals.
Collaborate with product and solution teams to achieve Global Information Security software-security program objectives.
Define simplified security metrics that help executive leaders, line leaders, and operational staff act on application-security risks.
Collaborate with internal and third-party application development teams to define reasonable enterprise security controls.
Build secure products and standards for emerging technologies and areas without established standards or security practices.
Develop and optimize processes that improve software-development efficiency in adopting security practices.