Cybersecurity Engineer (DevSecOps - Infrastructure)

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Visa's Cyber Engineering team is looking for an Open source & Automation Engineer who will be responsible for transforming large scale infrastructure from manually executed releases, patching and upgrades into a highly automated process utilizing the latest in scripted and automated execution of large-scale Cyber Security initiatives. In this position, you are a passionate and talented engineer/developer with problem-solving abilities and very strong infrastructure skill with a coding/testing/debugging background/familiarity who can work in a dynamic environment. You must be dedicated to delivering production-ready solutions in short time frames and willing to go beyond the routine. Compliance with ITIL processes & resolution of security vulnerabilities, with limited manual interaction, is a core component of this role.

Essential Functions:

• 90% Linux/10% Windows Server Administration role, with very strong knowledge of Networking, Security Vulnerability patching and Linux administration.
• Monitoring Systems and Application health. Understanding Application architecture and administration and acting to proactively address issues with platform and internal application workflow.
• Implementation of solution for automating responses to health alerts of various applications and security appliances.
• Development of Ansible playbooks to ensure zero human touch upgrades, both for internal infrastructure, application patching, upgrades etc.
• Development & tuning of multi-layered alerts to provide early warning of critical system resources and ensuring a near zero downtime matrix.
• Scheduled maintenance activities to keep the infrastructure components robust with latest patches and updated versions of software running in the infrastructure stack.
• Experience in management of Open Source infra health monitoring technologies like Kapacitor, Prometheus, Grafana and so on.
• Expertise in using Ansible, Git and configuration management tools.
• Implementation of automation using scripting languages such as Python, Bash, Go Lang etc.
• Develop innovative solutions to protect the Visa brand, networks, assets and products by implementing state-the-art detection, prevention, and response capabilities.
• Design, engineer, operationalize and maintain the secure systems which support continuous deployment/integration solutions with strong focus towards innovation & Ansible or other tooling to execute seamless automation.
• Address Identity, Vulnerability and other technical security findings in a seamless way & with in expected timelines.
• Plan and execute proactive infrastructure upgrades based upon predetermined roadmaps.
• Have strong problem solving and debugging skills.
• Efficiently managed and maintained cluster of devices in large scale enterprise datacenters with minimum to zero downtime.
• Have excellent communication and interpersonal skills and above all, you are a team player!
• Mentor and lead the team on various aspect of business and security technologies.
• Understanding of ITIL based ticketing processes & ability to document and correctly communicate Change/Install plans which utilize Change windows and ticket-based tracking.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.

Basic Qualifications:

2+ years of relevant work experience and a Bachelors degree OR 5+ years of relevant work experience. Masters graduates must have 2+ years of relevant work experience to qualify.

Preferred Qualifications:

2 or more years of work experience with a Bachelor's degree or more than 2 years of work experience with an Advanced Degree. (e.g Masters, MBA, JD, MD)

Knowledge of AWS, GCP, SOAR & Orchestration platforms

Good understanding of AD/LDAP Identity Access Management

Web Server (NGINX/Apache) configuration expertise

Understanding of Cloud based solutions (AWS, Azure, Google Cloud) and capabilities for automation (Terraform etc..) with in the Cloud.

Minimum 2 years of experience in designing and maintaining enterprise infrastructure solutions.

Experience in Project life cycle activities on development and maintenance projects. Including CI/CD and tools development preferably open source

Minimum Bachelor's degree required from an accredited institution.

Strong customer centric mindset.

Proactive sense of urgency and can do attitude.

Strategic thinker who can balance big picture strategy with detailed, flawless execution.

Financial services and card payments experience is a plus.

Excellent communication skills.

Excellent team player.

CISSP, CISA , SANS GPEN, SANS GXPN, SANS GIAC, SANS GREM,OSCP (Offensive Security Certified Professional ) is a plus.

Key Skills Needed:

Ansible Playbook Creation & Development

Basic level of Python interpretation

Agile development - incorporating Continuous Integration and Continuous Delivery utilizing technologies such as GIT, Maven, Jenkins, Chef, Crucible, Sonar, Junit

Linux - Strong Linux and systems engineering knowledge with a good understanding of Identity and Access Management methodologies.

Python - Experience with python libraries & frameworks

Elastic Stack - You have used Kibana and Elastic search for logging and developed plugins, codecs for specific use cases.

Network experience: Socket, TCP/IP, UDP and Multicast

CI/CD Experience with triggered events

Ability to identify and remediate security issues, such as continuously ensuring packages are at latest versions and automatically regression tested

Independent - no micro managing here, but, you must be able to communicate

Configuration Management - Experience with Configuration management tools Such as Ansible/Salt stack/Chef/Puppet.

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.