Security Architect

As a Security Architect in Visa’s Cybersecurity M&A team, you will safeguard platforms, applications, and operations by leading security reviews and threat mitigation. You’ll shape cloud and container security in AWS and Kubernetes (EKS) and integrate security into CI/CD with engineering teams. You’ll refine policies, assess emerging threats, and provide guidance to build security-aware cultures. This role offers meaningful impact at scale and a path to advance security in a global payments ecosystem.

• Conduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and mitigations
• Design and implement security architectures for cloud environments, focusing on AWS and Kubernetes (EKS)
• Partner with DevOps and software teams to embed security practices in CI/CD and the development lifecycle
• Develop and refine security policies and procedures to strengthen protection and support compliance
• Assess emerging threats, tools, and methodologies to inform strategic recommendations
• Provide technical guidance and training to internal teams to strengthen security awareness and practices

• Security architecture reviews and threat modelling using industry standards
• Designing security controls for SaaS applications and backend services across API gateways, IAM, data protection, and SIEM-based monitoring
• Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities
• Strong understanding of SaaS, PaaS, and IaaS security considerations
• Understanding of secure development lifecycle methodologies and Agile practices
• Working knowledge of Java, C#, and .NET; ability to complete a coding assessment
• Penetration testing experience is a strong advantage
• Experience with intrusion detection/prevention, firewalls, antivirus, policy enforcement, configuration management, security monitoring, audit
• Generative AI: advanced hands-on use of AI harnesses, automated workflows and engineering integrations
• M&A activities experience is a plus
• Collaboration with cross-functional teams (cybersecurity, engineering, pentesting, operations)
• Strong written and verbal communication; ability to document findings for technical and non-technical stakeholders
• Industry certifications such as CISSP, GIAC, or OSCP, or willingness to pursue them

• collaboration
• clear communication
• ability to work with cross-functional teams
• AWS
• Kubernetes (EKS)
• API security and gateways