Senior Cloud Security Analyst

Visa is looking for a Senior Cloud Security Analyst to secure Pismo's cloud-native infrastructure, platforms, and services. The successful candidate will serve as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation.

Responsibilities:

• Monitor and improve the security posture of cloud environments and supporting infrastructure.
• Investigate and respond to security alerts, suspicious activities, and cloud security incidents.
• Support detection engineering efforts and continuously improve security monitoring capabilities.
• Conduct threat analysis and collaborate with incident response teams during investigations.
• Develop and maintain operational security metrics, dashboards, and reporting.

Cloud Security Architecture:

• Review cloud architectures and provide security guidance during design and implementation phases.
• Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.
• Assess new technologies and cloud services for security risks and compliance requirements.
• Support implementation of security controls across cloud-native and containerized environments.

Identity & Access Management:

• Review and monitor privileged access within cloud environments.
• Support implementation of least-privilege and role-based access control models.
• Identify excessive permissions and work with stakeholders to remediate access risks.
• Collaborate with IAM teams to strengthen authentication, authorization, and credential management processes.

Vulnerability & Configuration Management:

• Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.
• Perform security assessments of cloud resources and configurations.
• Validate compliance with secure configuration baselines and security standards.
• Work with engineering teams to remediate security findings within agreed timelines.

Security Automation & DevSecOps:

• Support implementation of automated security controls within CI/CD pipelines.
• Enhance infrastructure-as-code security practices and automated compliance monitoring.
• Develop security use cases and automation playbooks to improve operational efficiency.
• Participate in initiatives leveraging AI and automation to improve security operations and risk management activities.

Compliance & Risk Management:

• Support audits, certification programs, and client security assessments.
• Provide technical evidence and documentation for compliance initiatives, including ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks.
• Conduct cloud security risk assessments and support remediation planning.
• Assist with implementation and validation of security controls required by internal policies and regulatory requirements.

Cross-Functional Collaboration:

• Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams to drive security improvements.
• Participate in cloud security projects and strategic security initiatives.
• Contribute to security awareness and knowledge-sharing activities.
• Mentor junior analysts and support development of cloud security capabilities across the organization.

Requirements:

• 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced Degree.
• Experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.
• Hands-on experience securing AWS cloud environments.
• Strong understanding of cloud-native security principles.
• Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.

Nice to Have:

• 6 or more years of work experience with a Bachelor's Degree or 4 or more years of relevant experience with an Advanced Degree.
• Experience implementing and operating cloud security controls across at least one major cloud platform.
• Knowledge of security frameworks and standards including ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and NIST Cybersecurity Framework.
• Strong communication, stakeholder management, and technical documentation skills.
• Experience with multiple cloud providers.
• Relevant certifications.