Sr. Cybersecurity Engineer

Visa•Austin, TX

4d•$133,300 - $213,400•Hybrid

About The Position

The Senior Cloud Security Analyst is responsible for securing Pismo's cloud-native infrastructure, platforms, and services by designing, implementing, monitoring, and continuously improving cloud security capabilities. The role works closely with Engineering, Site Reliability Engineering (SRE), Infrastructure, IAM, Security Architecture, Product Security, and Governance, Risk & Compliance teams to keep cloud environments secure, resilient, and aligned with internal security standards, Visa requirements, and regulatory obligations. The successful candidate serves as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation. The role supports strategic security initiatives and helps maintain compliance with industry standards and client commitments. This is a hybrid position requiring at least three days in the office, with the specific days confirmed by the Hiring Manager. The role requires travel 5–10% of the time and is performed in an office setting. Work hours vary according to department needs.

Requirements

Basic qualification: 5+ years of relevant work experience with a Bachelor's Degree, at least 2 years with an advanced degree, or 0 years with a PhD; alternatively, 8+ years of relevant work experience.
Minimum 5 years of experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.
Hands-on experience securing AWS cloud environments, including network security, IAM, encryption, logging, monitoring, and security services.
Experience implementing and operating cloud security controls across at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform.
Strong understanding of cloud-native security principles, including IAM, key management and encryption, network segmentation and security, container and Kubernetes security, infrastructure as code, and DevSecOps practices.
Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.
Experience conducting cloud security assessments, risk assessments, and security control reviews.
Experience supporting Information Assurance, audit readiness, compliance assessments, and control validation activities.
Knowledge of security frameworks and standards including ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and the NIST Cybersecurity Framework.
Strong communication, stakeholder management, and technical documentation skills.

Nice To Haves

6 or more years of work experience with a Bachelor's Degree, 4 or more years of relevant experience with an advanced degree, or up to 3 years of relevant experience with a PhD.
Experience with multiple cloud providers (AWS, Azure, and/or GCP).
AWS Certified Security – Specialty.
AWS Solutions Architect Associate or Professional certification.
Microsoft Certified: Azure Security Engineer Associate.
CISSP, CCSP, CISM, CRISC, or GIAC certifications.
Experience within banking, payments, fintech, or other highly regulated industries.
Experience supporting PCI DSS, PCI PIN Security, SOC, ISO 27001, and regulatory examinations.

Responsibilities

Monitor and improve the security posture of cloud environments and supporting infrastructure.
Investigate and respond to security alerts, suspicious activities, and cloud security incidents.
Support detection engineering and continuously improve security monitoring capabilities.
Conduct threat analysis and collaborate with incident response teams during investigations.
Develop and maintain operational security metrics, dashboards, and reporting.
Review cloud architectures and provide security guidance during design and implementation.
Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.
Assess new technologies and cloud services for security risks and compliance requirements.
Support implementation of security controls across cloud-native and containerized environments.
Review and monitor privileged access within cloud environments.
Support least-privilege and role-based access control models; identify excessive permissions and work with stakeholders to remediate access risks.
Collaborate with IAM teams to strengthen authentication, authorization, and credential management.
Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.
Perform security assessments of cloud resources and configurations, and validate compliance with secure configuration baselines and security standards.
Work with engineering teams to remediate security findings within agreed timelines.
Support automated security controls in CI/CD pipelines, infrastructure-as-code security practices, and automated compliance monitoring.
Develop security use cases and automation playbooks to improve operational efficiency.
Participate in initiatives using AI and automation to improve security operations and risk management.
Support audits, certification programs, and client security assessments by providing technical evidence and documentation.
Conduct cloud security risk assessments and support remediation planning.
Assist with implementation and validation of controls required by internal policies and regulatory requirements.
Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams to drive security improvements.
Participate in cloud security projects and strategic security initiatives, and contribute to security awareness and knowledge-sharing activities.
Mentor junior analysts and support development of cloud security capabilities across the organization.