Sr. Cybersecurity Engineer - Network Security

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

This is an individual contributor role responsible for solving problems and taking a broad perspective to identify innovative solutions. This is at intermediate professional level and works independently with minimal guidance and requires a high-level proficiency in networking and security disciplines.

Essential Functions:

• This position is responsible for day-to-day administration of network firewalls and proxy systems, designed to protect networks and systems from malicious/unauthorized network access or misuse.
• Developing and maintaining automation software and scripts for managing production networks
• Primary responsibilities include, updating firewall rules/policies to meet customer requirements, validating that user requests do not allow unauthorized network access, firewall log analysis, troubleshooting network connectivity problem via use of packet captures using packet capture technologies.
• Having broad knowledge of information security, understanding application, data, threats and mitigation, and security trends. 
• Troubleshooting firewall fault conditions and coordinating firewall rebuild efforts
• Coordinates with the Security Operations Center to proactively defend against the known exploits and vulnerabilities.
• Configures internet proxy servers to restrict corporate internet access to support the company's acceptable use policy.
• Diagnoses and resolves network connectivity problems in short time frames
• Applies security software patches, and assists in capacity expansions.
• Updates incident and change management records
• Provides technical support for activities that improve the security posture of Visa's networks.
• Provides 24x7 on-call support whenever preformation the duty of on-call, which has roaster that is rotated.
• Need to work on shift hours, UK shift 1:00 PM to 10:00 PM OR US Shift/Night Shift 10:00 PM to Next day 7:00 AM with one hour break

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Basic Qualification:
• 5+ years of relevant work experience with a Bachelor’s Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.

Preferred Qualification:
• 6 or more years of work experience with a Bachelor’s Degree in engineering, computer science or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD
• Strong experience in standard Enterprise Network Firewalls such as Check Point, Fortinet, and Palo Alto Networks
• Strong experience on WAF solution on cloud and on prem, such as Imperva, Akamai Cloud, F5, Fortinet etc.
• Strong experience on Anti-DDoS Solutions – Radware, Nexusguards, Arbor Networks, Akamai
• Ability to manage Provider-1 and/or Panorama management and logging systems
• Experience in network automation
• Experience deploying, configuring, and maintaining Linux OS
• Experience with Infrastructure as Code tools (Ansible, Chef, Terraform, etc.)
• Experience with high-level programming languages (Bash, Python, Ruby, etc.)
• Experience interacting with REST APIs and related tools like Postman
• Self-motivated, attitude of ownership, and a strong desire to learn
• Lead and mentor junior team members, on various aspects of network security.
• Experience administering enterprise IP networks in mission-critical, 24x7 production environments
• Demonstrated ability to systematically troubleshoot problems in complex systems and network environments
• Experience supporting Bluecoat Proxy, Cisco ASA and Arbor technologies and policy management
• Experience in Linux and Windows operating systems (high comfort level using CLI interface)
• Check Point Administrator (CCSA), Check Point Engineer (CCSE), Cisco Certified Network Associate (CCNA), Certified Ethical Hacker, CompTIA Security+ certifications preferred
• Experience in F5 GTM , Radware , Nexusguards , Arbor networks is a plus
• Familiar with ITIL concepts such as Incident, Change, and Problem Management

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.