Senior Cybersecurity Engineer

• Secure Pismo’s cloud-native infrastructure, platforms, and services through design, implementation, monitoring, and continuous improvement of cloud security capabilities
• Monitor and improve the security posture of cloud environments and supporting infrastructure
• Investigate and respond to security alerts, suspicious activities, and cloud security incidents
• Support detection engineering and improve security monitoring capabilities
• Conduct threat analysis and collaborate with incident response teams during investigations
• Develop and maintain operational security metrics, dashboards, and reporting
• Review cloud architectures and provide security guidance during design and implementation
• Embed secure-by-design principles into cloud services and infrastructure
• Assess new technologies and cloud services for security risks and compliance requirements
• Implement security controls across cloud-native and containerized environments
• Review and monitor privileged access; support least-privilege and role-based access control
• Identify excessive permissions and remediate access risks with stakeholders
• Strengthen authentication, authorization, and credential management processes with IAM teams
• Identify, prioritize, and track remediation of cloud infrastructure vulnerabilities
• Perform security assessments of cloud resources and configurations
• Validate compliance with secure configuration baselines and security standards
• Remediate security findings with engineering teams within agreed timelines
• Implement automated security controls within CI/CD pipelines
• Enhance infrastructure-as-code security practices and automated compliance monitoring
• Develop security use cases and automation playbooks
• Participate in AI and automation initiatives to improve security operations and risk management
• Support audits, certification programs, and client security assessments
• Provide technical evidence and documentation for ISO 27001, SOC 1, SOC 2, PCI DSS, and other applicable frameworks
• Conduct cloud security risk assessments and support remediation planning
• Implement and validate controls required by internal policies and regulatory requirements
• Partner with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams
• Participate in cloud security projects and strategic security initiatives
• Contribute to security awareness and knowledge-sharing activities
• Mentor junior analysts and support development of cloud security capabilities

• 5+ years of relevant work experience with a Bachelor’s Degree OR at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) OR 0 years of work experience with a PhD OR 8+ years of relevant work experience
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
• Minimum 5 years of experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations
• Hands-on experience securing AWS cloud environments, including network security, IAM, encryption, logging, monitoring, and security services
• Experience implementing and operating cloud security controls across at least one major cloud platform: AWS, Azure, or GCP
• Strong understanding of IAM, key management and encryption, network segmentation and security, container and Kubernetes security, IaC, and DevSecOps practices
• Experience with cloud security monitoring, threat detection, incident response, and vulnerability management
• Experience conducting cloud security assessments, risk assessments, and security control reviews
• Experience supporting Information Assurance, audit readiness, compliance assessments, and control validation activities
• Knowledge of ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and NIST Cybersecurity Framework
• Strong communication, stakeholder management, and technical documentation skills
• Experience with multiple cloud providers (AWS, Azure, and/or GCP)
• AWS Certified Security – Specialty
• AWS Solutions Architect Associate/Professional
• Microsoft Certified: Azure Security Engineer Associate
• CISSP, CCSP, CISM, CRISC, or GIAC certifications
• Experience within banking, payments, fintech, or other highly regulated industries
• Experience supporting PCI DSS, PCI PIN Security, SOC, ISO 27001, and regulatory examinations

• Fully remote position; remote positions do not require job duties to be performed within proximity of a Visa office location
• May be required to be present at a Visa office with scheduled notice