{"id":3966274,"url":"https://alion.io/job/visa-cybersecurity-engineer-6","title":"Cybersecurity Engineer","company":{"id":83,"name":"Visa","domain":"visa.com","url":"https://alion.io/company/visa","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":128,"ghost_share":0.008,"stale_share":0.547,"repost_share":0.039,"time_to_fill_p50_days":33,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":112100,"max":173400,"currency":"USD","period":"year","gross":null,"usd_annual":173400},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Git","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true}],"status":"live","first_seen_at":"2026-11-09T14:19:01Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T14:19:01Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us\nVisa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.\nAt Visa, you'll have the opportunity to create impact at scale - tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.\nJoin Visa and do work that matters - to you, to your community, and to the world. Progress starts with you.\nJob Description\nRole Summary:\nThe Cybersecurity Analyst - IAM supports the operation of identity and access management controls across the Pismo platform,\nhelping ensure compliance with the Visa Corporate Identity & Access Technical Security Requirements.\nWorking with senior IAM engineers, the analyst operates and continuously improves access controls for human and non-human identities\nacross AWS and hybrid environments: running access reviews, analysing permissions, monitoring privileged access, maintaining identity\ninventories and automating recurring tasks.\nThe role partners with Cloud Security, Platform Engineering, API, DevSecOps and GRC teams to apply least-privilege and zero-trust\npractices in a regulated, multi-tenant payments environment.\nThe role also supports the governance of AI-enabled identity use cases. It keeps track of the identities, credentials and permissions\nused by AI systems, agents and automation, and checks them against Internal AI Governance standards and Corporate IAM requirements.\nKey Responsibilities\nAccess governance\nRun periodic user access reviews and recertifications for Pismo applications and components, and collect, reconcile and keep the evidence.\nMonitor joiner, mover and leaver events and confirm that access is granted, changed and removed on time across the identity provider,\ncloud accounts, source control and Kubernetes clusters.\nReview access requests and permission changes, including group, role and permission-set changes submitted as code, for least privilege\nand separation of duties.\nPermissions and privileged access\nAnalyse cloud and platform permissions to find excessive, unused or orphaned access, and track remediation with the owning teams.\nMonitor privileged, just-in-time and break-glass access, investigate deviations and report exceptions.\nKeep the role and entitlement catalogue and the access matrix of each application up to date.\nNon-human identities\nMaintain the inventory of service accounts, workload roles, API credentials and AI agent identities, with owner, purpose, permissions\nand application mapping.\nCheck that non-human identities meet the standards for ownership, scope, credential rotation and expiry.\nAutomation\nWrite and maintain scripts and automations that use identity and cloud APIs and SDKs to extract access data, produce reports and automate recurring checks.\nMake changes to existing Terraform-based/ AWS automation IAM definitions through the standard review process.\nCompliance and reporting\nSupport internal and external audits and Visa security assessments (PCI DSS, ISO 27001, SOC 2) with access-control evidence and control testing.\nTrack IAM findings and exceptions through to closure, and report status and metrics to IAM leadership.\nWrite and maintain runbooks, procedures and documentation for IAM processes.\nThis is a hybrid position. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.\nQualifications\nBasic Qualifications:\n2+ years of relevant work experience and a Bachelor's degree, OR 5+ years of relevant work experience. Master's graduates must have 2+ years of relevant work experience to qualify at the Analyst (I5) level.\nPreferred Qualifications:\n3 or more years of work experience with a Bachelor's Degree or more than 2 years of work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD).\n2+ years of hands-on experience in identity and access management, cloud security or security operations.\nExperience administering or operating an enterprise identity provider (Okta preferred, or Microsoft Entra ID), including SSO (SAML/OIDC), MFA, groups and group rules, and lifecycle provisioning (SCIM).\nWorking knowledge of AWS IAM: roles, policies and trust policies, IAM Identity Center permission sets, and the ability to read and evaluate policy documents. Exposure to Azure or GCP IAM is a plus.\nUnderstanding of RBAC and ABAC, least privilege, separation of duties, and just-in-time and break-glass access.\nExperience running access reviews or certifications and supporting joiner/mover/leaver processes.\nScripting in Python or an equivalent language, including calls to REST APIs and SDKs (e.g. Okta API, AWS SDK).\nAbility to read and change Terraform, and to work with Git and pull requests.\nFamiliarity with Kubernetes RBAC and service accounts.\nKnowledge of the access-control requirements in PCI DSS (Requirements 7 and 8), ISO 27001 and NIST SP 800-53 (AC family).\nClear written communication, including documentation and audit evidence.\nRelevant certifications are a plus but not mandatory, such as Okta Certified Administrator, Microsoft SC-300, AWS Certified Solutions Architect - Associate or Security - Specialty, or CompTIA Security+.\n\nInformation for US Applicants\nFor roles located in the US, the estimated salary range for this position is $112.100,00 to $ 173.400,00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.Work Hours\nVaries upon the needs of the department.\nTravel Requirements\nThis position requires travel 5-10% of the time.\nMental/Physical Requirements\nThis position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.\nVisa is an EEO Employer\nQualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.","description_format":"text","description_chars":6684,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Cards & Card Issuing","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-11-09T14:19:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 756 · green card filings: 121","filings_12m":756,"filings_prev_12m":1087,"green_card_filings_12m":121,"median_offered_wage_usd":147620,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":102}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":33,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-09T16:10:12Z"},"pay":{"stated_usd_annual":173400,"is_top_pay":true},"html_url":"https://alion.io/job/visa-cybersecurity-engineer-6","json_url":"https://alion.io/job/visa-cybersecurity-engineer-6.json","meta":{"generated_at":"2026-11-09T16:10:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23295,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":83},"rest":"https://alion.io/mcp/rest/get_company?id=83"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvisa-cybersecurity-engineer-6"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvisa-cybersecurity-engineer-6"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvisa-cybersecurity-engineer-6"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/visa-cybersecurity-engineer-6\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvisa-cybersecurity-engineer-6"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3966274}},{"tool":"search_jobs","arguments":{"company":"visa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3966274},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}