Cybersecurity Engineer and Security Architect

Cybersecurity is at the heart of Visa's culture, and we're looking for a Cybersecurity Engineer and Security Architect to join our team.

As a Cybersecurity Engineer and Security Architect, you'll work with a group of enterprise and application security architects, along with security researchers to lead the advanced prototyping to accelerate time-to-market of new and exciting cybersecurity research and innovative ideas and proposals.

Your day-to-day responsibilities will include:

• Being a product security champion by driving Security Architecture and Design/implementation/optimization for Web, API and Mobile, AI Agent applications across Visa.
• Engaging in the initial requirements definition including analysis of threats and risks and alignment with Visa security, Engineering, IT and Architecture standards.
• Conducting and facilitating security reviews, threat modelling including deep design reviews throughout the development lifecycle.
• Facilitating "table-top"/red-team/scenario analysis exercises in conjunction with other SME's, and planning the resolution of any identified vulnerabilities/issues.
• Developing proof-of-concept prototypes and scalable enterprise products for promising cybersecurity solutions leveraging AI/ML, ensuring alignment with Visa's existing security architecture and strategic goals.
• Identifying and assessing innovative cybersecurity tools, companies, and concepts that can enhance Visa's security architecture.
• Working closely with internal stakeholders, including the Cybersecurity Product Development team, to transition prototypes into fully operational products and solutions.
• Automating security tools and processes to advance security capabilities across key cybersecurity areas, including access control, defense-in-depth, secure coding practices, and AI agent governance.
• Continuously monitoring and analyzing emerging cybersecurity trends, technologies, and practices that have the potential to impact Visa's security posture.
• Staying up to date on new security tools & techniques in the information security space.

You'll be working on enabling/building security on various platforms and technologies which protect the applications from attacks like:

• Payment processing platforms, Payment Wallet solutions, Consumer facing applications, COTS products deployed in house, public clouds, Issuer/Acquirer facing platforms and applications, white labelled solutions for partners.
• zTPF, zOS, MVS, Linux, Windows, VMWare, Openstack, SDN, Public cloud like AWS, Google.
• Cybersecurity tools like IDS, SIEM, Tripwire, Tanium, Netwitness, Netflow, WAF.
• HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc.
• Web technologies like HTTP, SOAP, REST services, AJAX.
• Databases like Oracle, MS SQL, Couchbase, Cassandra, Riak, Aerospike.
• Caching services like Kafka, Coherence, MQ.
• Big-data like Hadoop.
• Web Access Management solutions like Forgerock, Siteminder, Custom/in-house Security Frameworks.

Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

Basic Qualifications:

• 2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience.
• Agentic AI Development experience.
• Experience in developing highly available and scalable enterprise services using Python. Experience with Java, Go, Rust or any other object-oriented programming language.
• Hands-on experience with GenAI technologies , including LLMs, prompt engineering, embeddings, fine-tuning, and AI agents or agentic pipelines.
• Cybersecurity training or education.

Preferred Qualifications:

• Specialist: 2 - 5 years of relevant work experience.
• 1 year of Agentic AI Development experience.
• Cybersecurity training or education.
• Bachelor's degree in computer science (or equivalent) from an accredited university.
• Minimum of 3+ years of experience in developing highly available and scalable enterprise services using Python. Experience with Java, Go, Rust or any other object-oriented programming language is a plus.
• 1+ years of hands-on experience with GenAI technologies , including LLMs, prompt engineering, embeddings, fine-tuning, and AI agents or agentic pipelines.
• Strong software engineering background with experience in Python, PyTorch, TensorFlow, or JAX..
• Hands-on experience with LLMs (e.g., GPT, Claude, Mistral), vector databases (e.g., FAISS, Pinecone), and orchestration tools (e.g., LangChain, LangGraph, Autogen).
• Hands-on experience with design and development tools like IntelliJ, VSCode, Postman, and Jupyter.
• Expertise in evaluating various large language models (LLMs), assessing their performance, and comparing their capabilities to identify suitable models based on business requirements.
• Hands-on experience with AI model APIs and AI agent frameworks.
• Proficiency in modern backend architectures, including cloud-native development (e.g., AWS, GCP, Azure), containerization (Docker/Kubernetes), and distributed systems.
• Proficiency in working with both RDBMS and NoSQL databases.
• Proven ability to build Threat Models and analyze security weaknesses in complex deployments with varying technology stack.
• Expertise in securing the integration of multiple environments across on-premises, multi-cloud, and hybrid architectures. Strong understanding of application and network security.
• Good understanding of current compliance, regulatory and legal requirements relevant to the transaction processing industry such as PCI, HIPPA, SOX, and GLB.
• Ability to multi-task in a dynamic and fast-paced environment.
• Solid understanding of software development best practices and principles.
• Experience with Agile methodologies and practices.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication skills, both written and verbal, to effectively collaborate with cross-functional teams.