Cybersecurity Engineer

Visa, Highlands Ranch CO, US

Everywhere you want to be

Duration: Full-Time

Cyber Security Engineering - Network Security Operations department provides operational support for inline cyber security defenses including firewalls, proxies and DDOS appliances as well as integration of those platforms as required. The successful candidate will be responsible for solving complex problems and taking a broad perspective to identify innovative solutions. This role serves as a technical/functional specialist and requires a high-level proficiency in networking and network security disciplines.

Essential Functions

  • Day-to-day support and administration of network firewalls, internet proxies and DDOS mitigation systems in a global, highly complex and fast evolving network
  • Provide technical coordination and serve as escalation point for complex technical issues
  • Mentor junior team members, develop departmental procedures and best practices standards
  • Provide recommendations to management team to increase effectiveness of organization and technology solutions
  • Perform troubleshooting to resolve and identify root cause of production issues in the shortest possible timeframe
  • Implement product upgrades, patches and capacity expansions
  • Update firewall rules/policies to meet security requirements, creating and supporting rules design via systems automation. To include optimization, ownership, expiry and certification, across multiple vendor platforms
  • Coordinate with the Security Review team and application owners to define new global rules and rules design decisions
  • Take implementation accountability and ownership of assigned project tasks and ensure all objectives meet stringent operational guidelines
  • Ensure compliance with defined security requirements. Remediate compliance issues the defined objectives
  • Ensure timely and accurate reporting and updates for incident, request, change management, and network/firewall assurance programs
  • Provide technical support for activities that improve the security posture of Visa’s networks
  • Assist in proof-of-concept phase to deployment, and manage operational acceptance criteria for sustained engineering support for multiple security tools
  • Work closely with other network, systems, and security teams within Visa, maintaining up to the minute information about the underlying network, security, and systems to make sure the security tool deployments are operating effectively
  • Work with the Cyber Security division to ensure solutions deployed meet Visa Security Requirements and provide technical assistance for investigation and analysis of security alerts
  • Collaborate with all internal and 3rd party security and audit teams to implement security controls that protect the Visa brand from real or potential security issues
  • Work with vendors to establish product recommendations, configuration, implementation and problem management
  • Build systems to automate deployment, configuration, and reduce human error for repeatable and well understood tasks
  • Provide recommendations to management team to increase effectiveness of organization and technology solutions
  • Develop processes and procedures that follow best practices, for use by the Network Security Operations team and third parties in the management of network environments
  • Develop and position solutions and work with stakeholders to create a roadmap to effectively gain buy-in from all stakeholders
  • Build and maintain relationships with global and virtual teams and third parties
  • Some weekend work and participation in on-call rotation as part of global team is required
  • Ability to travel is required, at times up to 10%

Basic Qualifications

  • 2 or more years of work experience with a Bachelor’s Degree or an Advanced Degree (e.g. Masters, MBA, JD, MD, or PhD)

Preferred Qualifications

  • 4+ years of work experience with a Bachelor’s Degree or 2 years of experience with an Advanced Degree
  • Advanced proficiency with two of Checkpoint Firewall-1, Palo Alto firewall technologies, Symantec Blue Coat proxy
  • Ability to manage Provider-1 and/or Panorama management and logging systems
  • Strong understanding of networks, security technologies, and systems technologies
  • Proven ability to troubleshoot problems systematically in complex systems and network environments
  • Customer focused mindset, excellent communication, interpersonal, and collaboration skills
  • Experience with on and off premise DDOS solutions
  • Able to use protocol analyzers or packet capture software to diagnose and resolve IP connectivity problems
  • Experience with monitoring, tuning, and alerting
  • Strong LINUX skills, scripting, automation of tasks and manipulate data via API and Ansible.
  • Experience with server platforms, virtualization, containers, and cloud technologies
  • Operational knowledge of systems, databases and network security engineering best practices
  • ITIL certification preferred. Familiar with ITIL concepts such as Incident, Change, and Problem Management
  • Experience with policy orchestration, compliance and automation tools (e.g. Tufin, Skybox)
  • Preferred certifications include: CISSP, ITIL, and vendor specific certifications including Check Point Administrator (CCSA), Check Point Engineer (CCSE), Cisco Certified Network Associate (CCNA), Palo Alto Networks Certified Network Security Engineer (PCNSE)

This position has a minimum base salary of $103,400 and a midpoint base salary of $131,800 . The base pay may vary depending on job-related knowledge, skills, and experience. In addition, this position is eligible for annual bonus and equity.

Flex Work Arrangement: This is a hybrid position. Hybrid employees can alternate time between both home and office. Employees in hybrid roles are expected to work from the office three days a week, Monday (Sunday in some countries where Sunday is the start of the week) and Wednesdays. Wednesdays are designated as in-office collaboration days. The third day in the office will be decided based on team needs and determined in partnership with senior leadership.

Visa has adopted a COVID-19 vaccination policy to safeguard the health and well-being of our employees and visitors. As a condition of employment, all employees based in the U.S. are required to be fully vaccinated for COVID-19, unless a reasonable accommodation is approved or as otherwise required by law.

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.  Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

About Visa

Visa Inc. (NYSE: V) is the world’s leader in digital payments. Our mission is to connect the world through the most innovative, reliable and secure payment network - enabling individuals, businesses and economies to thrive. Our advanced global processing network, VisaNet, provides secure and reliable payments around the world, and is capable of handling more than 65,000 transaction messages a second. The company’s relentless focus on innovation is a catalyst for the rapid growth of connected commerce on any device, and a driving force behind the dream of a cashless future for everyone, everywhere. As the world moves from analog to digital, Visa is applying our brand, products, people, network and scale to reshape the future of commerce.

Want to learn more about Visa? Visit Visa's website.