Security Architect

As a Security Architect in the Cybersecurity M&A team, you will secure our platform, applications, operations and product use through security reviews and threat mitigation.

About Visa

Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Visa and do work that matters – to you, to your community, and to the world.

Progress starts with you.

Responsibilities

• You must be an advanced generative AI user, applying AI harnesses, automated workflows and engineering integrations—not just conversational chat.
• C onduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and recommend mitigations.
• Design and implement security architectures for cloud environments, with a focus on AWS and Kubernetes (EKS).
• Partner with DevOps and software development teams to embed security practices in CI/CD pipelines and throughout the development lifecycle.
• Develop and refine security policies and procedures to strengthen protection and support compliance.
• Assess emerging security threats, tools and methodologies to inform strategic recommendations.
• Provide technical guidance and training to internal teams to strengthen security awareness and practices.
• Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.
• Experience designing security controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.

Requirements

• Experience leading security architecture reviews and threat modelling using industry standards.
• Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.
• Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.
• Understanding of secure development lifecycle methodologies and Agile practices.
• Working knowledge of middleware and development platforms such as Java, C# and .NET.
• Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process.
• Practical experience with intrusion detection/prevention, firewalls, antivirus, policy enforcement, configuration management, security monitoring, audit or secure application development.
• Advanced hands-on use of AI harnesses, automated workflows and engineering integrations beyond conversational chat.
• Experience working with or supporting cross-functional teams, including cybersecurity, engineering, penetration testing and operations.
• Strong written and verbal skills, including documenting findings and communicating with technical and non-technical stakeholders.
• Industry certifications such as CISSP, GIAC or OSCP, or a strong willingness to pursue them.

Preferred

• Hands-on penetration testing experience is a strong advantage.
• Experience supporting mergers and acquisitions before or after deal completion is a plus.

Visa is an EEO Employer Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.