# Senior Cloud Security Analyst

**Company**: Visa
**Location**: Austin, TX
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $133,300.00 to $213,400.00 USD per year
**Category**: Security
**Industry**: Technology

**Apply**: https://visa.wd5.myworkdayjobs.com/en-US/Visa/job/US---Austin-TX/Sr-Cybersecurity-Engineer_REF090028W?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-cloud-security-analyst-9d5d6a39-56f/

## Description

Visa is looking for a Senior Cloud Security Analyst to secure Pismo's cloud-native infrastructure, platforms, and services. The successful candidate will serve as a subject matter expert in cloud security, security monitoring, threat detection, identity and access management, infrastructure security, and security automation.

**Responsibilities:**

- Monitor and improve the security posture of cloud environments and supporting infrastructure.

- Investigate and respond to security alerts, suspicious activities, and cloud security incidents.

- Support detection engineering efforts and continuously improve security monitoring capabilities.

- Conduct threat analysis and collaborate with incident response teams during investigations.

- Develop and maintain operational security metrics, dashboards, and reporting.

**Cloud Security Architecture:**

- Review cloud architectures and provide security guidance during design and implementation phases.

- Partner with engineering teams to embed secure-by-design principles into cloud services and infrastructure.

- Assess new technologies and cloud services for security risks and compliance requirements.

- Support implementation of security controls across cloud-native and containerized environments.

**Identity & Access Management:**

- Review and monitor privileged access within cloud environments.

- Support implementation of least-privilege and role-based access control models.

- Identify excessive permissions and work with stakeholders to remediate access risks.

- Collaborate with IAM teams to strengthen authentication, authorization, and credential management processes.

**Vulnerability & Configuration Management:**

- Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities.

- Perform security assessments of cloud resources and configurations.

- Validate compliance with secure configuration baselines and security standards.

- Work with engineering teams to remediate security findings within agreed timelines.

**Security Automation & DevSecOps:**

- Support implementation of automated security controls within CI/CD pipelines.

- Enhance infrastructure-as-code security practices and automated compliance monitoring.

- Develop security use cases and automation playbooks to improve operational efficiency.

- Participate in initiatives leveraging AI and automation to improve security operations and risk management activities.

**Compliance & Risk Management:**

- Support audits, certification programs, and client security assessments.

- Provide technical evidence and documentation for compliance initiatives, including ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks.

- Conduct cloud security risk assessments and support remediation planning.

- Assist with implementation and validation of security controls required by internal policies and regulatory requirements.

**Cross-Functional Collaboration:**

- Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams to drive security improvements.

- Participate in cloud security projects and strategic security initiatives.

- Contribute to security awareness and knowledge-sharing activities.

- Mentor junior analysts and support development of cloud security capabilities across the organization.

**Requirements:**

- 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced Degree.

- Experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.

- Hands-on experience securing AWS cloud environments.

- Strong understanding of cloud-native security principles.

- Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.

**Nice to Have:**

- 6 or more years of work experience with a Bachelor's Degree or 4 or more years of relevant experience with an Advanced Degree.

- Experience implementing and operating cloud security controls across at least one major cloud platform.

- Knowledge of security frameworks and standards including ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and NIST Cybersecurity Framework.

- Strong communication, stakeholder management, and technical documentation skills.

- Experience with multiple cloud providers.

- Relevant certifications.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- cloud security
- cybersecurity
- security engineering
- infrastructure security
- security operations
- AWS
- cloud-native security principles
- security monitoring
- threat detection
- incident response
- vulnerability management

### Nice to have
- cloud security controls
- multiple cloud providers
- security frameworks
- communication skills
- technical documentation skills
- certifications

---

Source: [Apply at visa.wd5.myworkdayjobs.com](https://visa.wd5.myworkdayjobs.com/en-US/Visa/job/US---Austin-TX/Sr-Cybersecurity-Engineer_REF090028W?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)