# Cloud Security Architecture **Company**: Visa **Location**: Foster City, CA **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: $200,000.00 to $320,000.00 USD per year **Category**: Security **Industry**: Technology **Apply**: https://visa.wd5.myworkdayjobs.com/en-US/Visa/job/US---Foster-City-CA/Lead-Cybersecurity-Engineer_REF087567W?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_88d3a16a-e5d ## Description Visa's Cyber Security team is seeking a Cloud Security Architecture with an automation-first mindset to design, build, and operate large-scale, cloud-native and AI-driven security platforms that protect Visa's global brand, networks, products, and data. This role combines hands-on engineering, automation-first security design, and technical leadership in a highly dynamic, high-impact environment. **Responsibilities:** **Security Engineering & Platform Development** - Design, develop, and operate large-scale cyber security platforms that deliver detection, prevention, and response capabilities across cloud and hybrid environments. - Build cloud-native, API-first security services using Python and modern web service frameworks. - Develop and expand security integration frameworks to interconnect SIEM, CSPM, CNAPP, IAM, network security, and threat intelligence platforms. - Drive security automation to minimize manual intervention and accelerate incident response workflows. **GenAI & Agentic Security Capabilities** - Design and implement GenAI-powered security workflows, including: - Autonomous agents for cloud misconfiguration analysis, policy validation, and remediation recommendations - AI-assisted threat triage, alert summarization, and root-cause analysis - Intelligent enrichment of security signals using applied threat intelligence - Build and operate agentic systems that can reason across telemetry, policies, and infrastructure state to propose or execute remediation actions safely. - Evaluate and adopt emerging LLM, agent orchestration, and AI governance frameworks for enterprise-grade security use cases. - Ensure secure, compliant, and auditable use of GenAI, including data handling, prompt safety, access controls, and model risk considerations. **Cloud Security & Automation** - Engineer and enforce cloud security controls across Azure (or AWS) in large-scale enterprise environments. - Implement Infrastructure-as-Code (IaC) and automation frameworks to provision and manage security controls using tools such as Terraform. - Drive Policy-as-Code and Guardrails, authoring and maintaining policies using: - Integrate GitOps-based promotion pipelines (dev → test → prod) with secure remote state management and drift detection. **Threat Detection, Response & Posture Management** - Reduce time-to-detect and time-to-remediate by automating: - Threat intelligence ingestion and correlation - Sensor enrichment and contextual risk scoring - Design and operate cloud security posture management (CSPM/CNAPP) capabilities using platforms such as Wiz, Prisma Cloud, or Microsoft Defender for Cloud. - Work across multiple security domains including: - Cloud firewalls and security groups, DDoS protection, Network proxies, Cloud-native SIEM platforms (e.g., ADX, Sumo Logic) **Architecture, Innovation & Leadership** - Lead technical design discussions and translate business requirements into secure, scalable architectures. - Conduct proof-of-concepts (POCs) for new technologies, tools, and architectures, evaluate feasibility and drive production adoption. - Stay current with emerging cloud, security, and AI technologies, proactively assessing their applicability within Visa. - Act as a technical leader and mentor, raising the engineering and security maturity of the team. - Contribute to project planning, including cost estimation, timelines, and risk assessment for new security initiatives. **Requirements:** - 10 or more years of work experience with a Bachelor's Degree or at least 8 years of work experience with an Advanced Degree (e.g. Masters/ MBA/JD/MD) or at least 3 years of work experience with a PhD - Expert-level in at least one major cloud platform, Azure preferred. - Hands-on experience migrating applications to the cloud and implementing cloud-native security controls at scale. - Proven ability to design and implement new security controls based on risk assessments, gaps, and regulatory requirements. **Preferred Qualifications:** - 12 or more years of work experience with a Bachelor's Degree or 8-10 years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 6+ years of work experience with a PhD - Cloud & Security Expertise - Strong domain expertise in cloud security engineering within multi-cloud enterprise environments (AWS, Azure). - Expert-level certification in at least one major cloud platform, Azure preferred. - Hands-on experience migrating applications to the cloud and implementing cloud-native security controls at scale. - Proven ability to design and implement new security controls based on risk assessments, gaps, and regulatory requirements. - Demonstrated experience building GenAI solutions and autonomous agents for cloud security engineering or security operations. - Strong programming skills in Python (preferred) or Go, with experience in building production-grade services. - Expertise in IaC, automation, and GitOps workflows, including secure state management and drift detection. - Experience with policy-as-code and enterprise guardrail enforcement. - Operational & Leadership Skills - Ability to independently drive POCs, own implementations end-to-end, and transition solutions into production. - Experience assisting with cost modeling, timelines, and delivery planning for security initiatives. - Strong understanding of threat management, vulnerability management, and cloud security posture management. - Excellent communication, collaboration, and technical leadership skills, with the ability to influence across teams. **Salary Information:** The estimated salary range for this position is $200,000.00 to $320,000.00 USD per year, which may include potential sales incentive payments (if applicable). **Benefits:** Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program. ## Skills ### Required - Python - cloud security - automation - GenAI - Azure - AWS - Terraform - GitOps ### Nice to have - expert-level certification in Azure - experience with LLM - agent orchestration - AI governance frameworks --- Source: [Apply at visa.wd5.myworkdayjobs.com](https://visa.wd5.myworkdayjobs.com/en-US/Visa/job/US---Foster-City-CA/Lead-Cybersecurity-Engineer_REF087567W?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)