Senior Red Team Analyst

• Conduct penetration testing and security assessments
• Perform API, web-application, and cloud security testing
• Identify vulnerabilities and manage security risks
• Conduct security reviews of microservices and distributed systems
• Collaborate with engineering and cybersecurity teams
• Report security findings and provide remediation guidance
• Perform AI-assisted security analysis and research
• Develop security automation and tooling
• Maintain security documentation and procedures
• Support PCI DSS, ISO 27001, and other compliance requirements
• Conduct threat research and apply offensive security techniques
• Communicate with stakeholders and support security awareness
• Continuously improve Red Team processes and methodologies
• Leverage AI, automation, and offensive security techniques across mission-critical core banking and financial technology platforms
• Identify risks, influence remediation efforts, and drive scalable security solutions

• 5+ years of relevant work experience with a Bachelor's Degree, or 2+ years of relevant work experience with an Advanced degree (e.g. Masters/MBA/JD/MD), or 0 years of relevant work experience with a PhD
• B1 English level for conversation
• 3+ years experience working in offensive security, penetration testing or vulnerability assessment roles
• Experience collaborating with development teams and cybersecurity squads to identify, communicate and remediate security findings
• Basic understanding of application security risks across APIs, microservices, and distributed systems
• Strong automation and scripting skills, with experience developing tools, workflows, or processes that reduce manual effort and improve the scalability of security operations
• Knowledge of OWASP Top 10 and NIST SP 800-115 security testing standards
• Basic knowledge of PCI DSS requirements and experience working in regulated environments
• Basic knowledge of AWS services and cloud environments
• Verbal and written communication skills, with the ability to clearly explain technical findings, influence remediation efforts, collaborate across teams, and communicate effectively with both technical and non-technical stakeholders
• Experience supporting mission-critical systems within the financial services industry, with a strong focus on availability, resilience, and security
• Strong documentation skills, including the ability to create and maintain security reports, procedures, and technical documentation
• Familiarity with ISO 27001 security controls and audit requirements

• Remote position with no requirement to perform duties near a Visa office
• May be required to attend a Visa office with scheduled notice