REF6477B - Staff Network (Security) Engineer

  • Ashburn, VA, us
  • Full-time

Company Description

Common Purpose, Uncommon Opportunity. Everyone at Visa works with one goal in mind – making sure that Visa is the best way to pay and be paid, for everyone everywhere. This is our global vision and the common purpose that unites the entire Visa team. As a global payments technology company, tech is at the heart of what we do: Our VisaNet network processes over 13,000 transactions per second for people and businesses around the world, enabling them to use digital currency instead of cash and checks. We are also global advocates for financial inclusion, working with partners around the world to help those who lack access to financial services join the global economy. Visa’s sponsorships, including the Olympics and FIFA™ World Cup, celebrate teamwork, diversity, and excellence throughout the world. If you have a passion to make a difference in the lives of people around the world, Visa offers an uncommon opportunity to build a strong, thriving career. Visa is fueled by our team of talented employees who continuously raise the bar on delivering the convenience and security of digital currency to people all over the world. Join our team and find out how Visa is everywhere you want to be.

Job Description

To be considered for this position in NetSecurity Ops, you must be a syntax ninja.  Preliminarily, we are looking for Checkpoint certifications and/or training.  We assure you will be grilled on firewall questions in the interview process. Experience with and knowledge of Palo Alto (PA) is kind of important, too.  This isn't an architect role--those of you who are will be bored in this role.  Be security-minded because at Visa security is top priority.  Last but not least, we need problem-solvers. If that sounds too vague, read on. 

Nitty Gritty Key responsibilities:

  • Day-to-day support and administration of network firewalls, internet proxies and DDOS mitigation systems in a global, highly complex and fast evolving network
  • Assist in proof of concept phase to deployment, and manage operational acceptance criteria for sustained engineering support for multiple security tools

  • Take lead in troubleshooting to resolve and identify root cause of production issues in the shortest possible time frame

  • Implement product upgrades, patches and capacity expansions

  • Update firewall rules/policies to meet security requirements, creating and supporting rules design via systems automation--to include optimization, ownership, expiry and certification

  • Coordinate with the Security Review team to define new global rules and rules design decisions

  • Take implementation accountability and ownership of assigned project tasks and ensure all objectives meet stringent operational guidelines

  • Ensure compliance with defined security requirements. Re-mediate compliance issues within a short time frame

  • Ensure timely and accurate reporting and updates for incident, request, change management, and network/firewall assurance programs

  • Provide technical support for activities that improve the security posture of Visa’s networks

  • Work closely with other network, systems, and security teams within Visa, maintaining up to the minute information about the underlying network, security, and systems to make sure the security tool deployments are operating effectively

  • Work with the Global Information Security to ensure solutions deployed meet Visa Security Requirements and provide technical assistance for investigation and analysis of security alerts
  • Collaborate with all internal and 3rd party security and audit teams to implement security controls that protect the Visa brand from real or potential security issues

  • Work with vendors to establish product recommendations, configuration, implementation and problem management

  • Build systems to automate deployment, configuration, and reduce human
    error for repeatable and well understood tasks

  • Provide recommendations to management team to increase effectiveness of organization and technology solutions

  • Participate in on call rotation as part of global team


Qualifications

As the best candidate for this role, you must already have the following: 

  • Bachelors/Degree in Computer Science or other technology field.  We'd love it if you also have a Master's Degree or in view of one (ask the recruiter about Visa's education and tuition reimbursement programs

  • 7 years plus in technology, information security, and/or network administration

  • Minimum of 3 years working on information security with a large, mission-critical enterprise environment

  • Proficient with two of Checkpoint Firewall-1, Palo Alto firewall technologies. PCNSE, CCSE, CCSA, CCNP, CCSP certifications preferred

  • Proven ability to troubleshoot problems systematically in complex systems and network environments

  • Strong interpersonal skills with effective communication (both written and verbal) skills

  • Advanced process orientation and exhibited planning, organizational and problem solving skills

  • Ability to understand systems from all levels, from the "big picture" enterprise-level view to the low level technical view

  • Demonstrated ability to work in a complex organization to determine business and customer needs, providing the best solution to meet those needs

Nice to haves: 

  • CISSP / SANS certifications a plus

  • Ability to manage Provider-1 and/or Panorama management and logging systems

  • Able to use protocol analyzers or packet capture software to diagnose and resolve IP connectivity problems

  • Blue Coat proxy / CASB

  • Operational knowledge of systems, databases and network security engineering best practices

  • Strong understanding of networks, security technologies, and systems technologies

  • ITIL certification preferred. Familiar with ITIL concepts such as Incident, Change, and Problem Management

  • Business process management experience tools experience (e.g., Tufin, Firemon, AlgoSec) and business process development

  • On and off premise DDOS solutions

  • Web Application Firewall

  • Monitoring and alerting

  • Strong LINUX skills, scripting

  • Experience managing teams for automation of tasks and manipulate data via Application Programming Interfaces (API)

  • Experience with server platforms, virtualization, and cloud technologies

Additional Information

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of Article 49 of the San Francisco Police Code.

All your information will be kept confidential according to EEO guidelines.

Privacy Policy