Security Architect

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

Role Summary:

As a Security Architect in the Cybersecurity M&A team, you will secure our platform, applications, operations and product use through security reviews and threat mitigation. You must be an advanced generative AI user, applying AI harnesses, automated workflows and engineering integrations—not just conversational chat.

Essential Functions:

• Conduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and recommend mitigations.
• Design and implement security architectures for cloud environments, with a focus on AWS and Kubernetes (EKS).
• Partner with DevOps and software development teams to embed security practices in CI/CD pipelines and throughout the development lifecycle.
• Develop and refine security policies and procedures to strengthen protection and support compliance.
• Assess emerging security threats, tools and methodologies to inform strategic recommendations.
• Provide technical guidance and training to internal teams to strengthen security awareness and practices.

Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

• Security Architecture: Experience leading security architecture reviews and threat modelling using industry standards.
• Security Controls: Experience designing security controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.
• Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.
• Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.
• Development Lifecycle: Understanding of secure development lifecycle methodologies and Agile practices.
• Technical Knowledge: Working knowledge of middleware and development platforms such as Java, C# and .NET.
• Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process.
• Penetration Testing: Hands-on penetration testing experience is a strong advantage.
• Security Tools: Practical experience with intrusion detection/prevention, firewalls, antivirus, policy enforcement, configuration management, security monitoring, audit or secure application development.
• Generative AI: Advanced hands-on use of AI harnesses, automated workflows and engineering integrations beyond conversational chat.
• M&A Activities: Experience supporting mergers and acquisitions before or after deal completion is a plus.
• Collaboration: Experience working with or supporting cross-functional teams, including cybersecurity, engineering, penetration testing and operations.
• Communication: Strong written and verbal skills, including documenting findings and communicating with technical and non-technical stakeholders.
• Certifications: Industry certifications such as CISSP, GIAC or OSCP, or a strong willingness to pursue them.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.