Job Description

• Develop proof-of-concept prototypes for promising cybersecurity solutions, ensuring alignment with Visa’s existing security architecture and strategic goals.
• Identify and assess innovative cybersecurity tools, companies, and concepts that can enhance Visa’s security architecture.
• Work closely with internal stakeholders, including the Cybersecurity Product Development team, to transition prototypes into fully operational products and solutions.
• Continuously monitor and analyze emerging cybersecurity trends, technologies, and practices that have the potential to impact Visa’s security posture.
• Build automation to Integrate and orchestrate existing security tools so we can quickly resolve damaging malware infections.
• Independently formulate direction, design or oversight for the development of major Enterprise-wide programs or plans that have significant impact on the success of the organization
• Be responsible for overall planning, direction and oversight of multiple projects, products, services or functions.
• Stay up to date on new security tools & techniques in the information security space.
• Conduct proof of concept activities with key business users in support of advanced use cases.
• Automate security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices for web and mobile applications.
• Be a product security champion by driving Security Architecture and Design/implementation/optimization for Web, API and Mobile backend applications across Visa.
• Engage in the initial requirements definition (including analysis of threats and risks and alignment with Visa security, Engineering, IT and Architecture standards).
• Conduct and facilitate security reviews, threat modelling including deep design reviews throughout the development lifecycle.
• You’ll be working on enabling/building security on various platforms and technologies which protect the applications from attacks like:
  o Payment processing platforms, Payment Wallet solutions, Consumer facing applications, COTS products deployed in house, public clouds, Issuer/Acquirer facing platforms and applications, white labelled solutions for partners.
  o zTPF, zOS, MVS, Linux, Windows, VMWare, Openstack, SDN, Public cloud like AWS, Google
  o Cybersecurity tools like IDS, SIEM, Tripwire, Tanium, Netwitness, Netflow, WAF
  o HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc
  o Web technologies like HTTP, SOAP, REST services, AJAX
  o Databases like Oracle, MS SQL, Couchbase, Cassandra, Riak, Aerospike
  o Programming languages like Java, C, C++, .Net, Javascript, Go Lang, Er Lang, Cobol etc
  o Caching services like Kafka, Coherence, MQ
  o Big-data like Hadoop
  o Web Access Management solutions like Forgerock, Siteminder, Custom/in-house Security Frameworks