Cybersecurity Engineer

Cybersecurity is at the beating heart of our culture. Our diligence and expertise is what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Cybersecurity team, poised to defend us against any potential cyber threats. We’re looking for those of you who are inherently driven and fascinated by the art and science of cybersecurity and more specifically, mergers and acquisitions with a specific focus on Cybersecurity integration. We’ll equip you with the very best tools and tech so that you can deliver top notch results. Continuous self-development underpins job fulfilment at Visa.As a Cyber Security Engineer within the Cybersecurity M&A Team, you are uniquely placed to utilise and grow your engineering and defence skills across a myriad of security technologies. Your role will cover:Cyber Engineering:Configure, deploy, and maintain security solutions and processes i.e. IDS, FIM, WAF, SASE, Firewalls, Web Proxies, vulnerability scanners.Configure, deploy, and maintain cloud security controls in Public Cloud.Develops advanced alerts/reports to meet the requirements of key stakeholders.Automate security tools management and workflow integration.Collaborate with other Cybersecurity and Engineering teams to address specific business needs.Develop SIEM correlation rules, enrichments, dashboards, reports, and alerts that appropriately characterize cyber-attacks and mitigations.IAM experience, Active Directory, SSO, MFA.Excellent understanding of common network and web protocols.Excellent understanding of DDoS techniques and mitigation mechanisms.Cyber Defense and Incident Response: Monitor Information Security alerts using Security Information and Event Management (SIEM) to triage, mitigate, and escalate issues as needed while capturing essential details and artifacts.Utilize sensor data and correlated logs containing AV, IDS, Windows events, Web Proxy, and similar data to establish context and rule out false positives.Mitigate and contain identified threats using approved incident response methodologies. Initiate escalation procedures and incident response processes as defined in operational plan.Perform analysis of security alerts to evaluate risk, determine containment action and identify required preventative measures.Ensure proper documentation of security incidents including attack details.Interact and aid other investigative teams within Visa on time sensitive, critical investigations.Provide feedback to peer teams to enhance security sensor and improve detection capability.Collaborate with operational support teams to ensure they are actively engaged in addressing potential security threats that can impact business.Contribute to projects that enhance the security posture of the enterprise.Operationalize actionable Threat Intelligence reports from internal and external sources.Identify trends, potential new technologies, and emerging threats which may impact the business.Respond to incoming reports of security incidents from the organization via calls and emails.This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.