Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

[Core IR]

Mitigate and contain identified threats using approved incident response methodologies. Initiate escalation procedures and incident response processes as defined in operational plan. Perform analysis of security alerts to evaluate risk, determine containment action and identify required preventative measures. Support Cyber Incident Response actions to ensure proper assessment, containment and mitigation step is taken.

[SME support and Mentoring]

Provide SME support and operational guidance in daily security incident response operation. Provide mentorship to improve technical capabilities of junior analysts within the sub-function.

[Threat Hunting and Case Analysis ]

Perform threat hunting and alert trend analysis to find inconspicuous threats. Identify trends, potential new technologies, and emerging threats which may impact the business. Operationalize actionable Threat Intelligence reports from internal and external sources.

[Improve Security Posture and Detection Capabilities]

Manage the security monitoring enrollment process to ensure adequate coverage and effectiveness of all new and existing cloud and on-premise based applications, services and platforms  Facilitate the development and tuning of SIEM rules to support enrollments and ensure high fidelity alerting  Work closely with other cross-functional teams within Cybersecurity to identify gaps and improve cybersecurity posture

[Contribute to IR Playbook and SOP]

Develop and review Incident Response Playbooks and SOPs to streamline incident response strategy and action across IR team.

[Partnership with Engineering and Business]

Act as a liaison between cyber-defense, engineering, security architecture, network & system operations, and functional project teams to ensure effective project. Work with colleagues in other technology departments as well as the business and product offices to establish effective, productive business relationships.

This is a hybrid position. Hybrid employees can alternate time between both home and office. Employees in hybrid roles are expected to work from the office three days a week, Monday (Sunday in some countries where Sunday is the start of the week) and Wednesdays. Wednesdays are designated as in-office collaboration days. The third day in the office will be decided based on team needs and determined in partnership with senior leadership. 

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.  Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.