Senior Cybersecurity Engineer, Applied Cryptography

  • Full-time
  • Job Family Group: Technology and Operations

Company Description

As the world’s leader in digital payments technology, Visa’s mission is to connect the world through the most creative, reliable and secure payment network - enabling individuals, businesses, and economies to thrive. Our advanced global processing network, VisaNet, provides secure and reliable payments around the world, and is capable of handling more than 65,000 transaction messages a second. The company’s dedication to innovation drives the rapid growth of connected commerce on any device, and fuels the dream of a cashless future for everyone, everywhere. As the world moves from analog to digital, Visa is applying our brand, products, people, network and scale to reshape the future of commerce.

At Visa, your individuality fits right in. Working here gives you an opportunity to impact the world, invest in your career growth, and be part of an inclusive and diverse workplace. We are a global team of disruptors, trailblazers, innovators and risk-takers who are helping drive economic growth in even the most remote parts of the world, creatively moving the industry forward, and doing meaningful work that brings financial literacy and digital commerce to millions of unbanked and underserved consumers.

You’re an Individual. We’re the team for you. Together, let’s transform the way the world pays.

Job Description

This position is for a Cybersecurity Engineer in the Applied Cryptography team who will assist in implementation, maintenance, documenting and support of Visa's Encryption Services.  Visa Data Protection, Public Key Infrastructure (PKI) and implemented key management systems and Host Security Modules (HSM) support.

Essential Functions

  • Assist in the maintenance and support all Enterprise Encryption Services protecting Data at Rest, Data in flight, and Transaction Data.
  • Work with senior members to evaluate upgrades and new products & technologies for the enterprise encryption solutions
  • Be a encryption security champion by driving SEncryption Security Architecture and Design/ implementation/optimization Encryption Solutions Visa.
  • Engage in the initial requirements definition including analysis of threats and risks and alignment with Visa security, Engineering, IT and Architecture standards.
  • Maintain, support, and troubleshoot encryption systems
  • Participate in projects to deploy new encryption applications and services
  • Implement changes to the encryption infrastructure in accordance with standard procedures and change control policies and procedures
  • Proactively identify and recommend process improvement to reduce risk and improve operational efficiency
  • Document design, installation, Operations & Maintenance guides
  • Support Visa end-to-end symmetric key management
  • Support HSM management support requests as per pre-defined sets of procedure and within agreed Service Level Agreements (SLA), resolve problem tickets and assist other staff members as needed
  • Monitor and troubleshoot encryption services for problem and failures, providing support and resolutions.
  • Support Data Encryption Deployments and Applied Cryptography
  • Maintain security certifications
  • Maintain technical certifications

Qualifications

Basic Qualifications

  • 4 years of work experience with a Bachelor’s Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD degree

Preferred Qualifications

  • 7-10 years of work experience and a Bachelor’s Degree or 6 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 3 years of experience with a PhD
  • Strong knowledge of encryption solutions and methodologies
  • Experience and deeper understanding on the FIPS 140-2 level 2+ certified Hardware Security Modules,  Key Management systems such as RSA Data Protection Management, Thales/Gemalto KeySecure, Vormetric DSM.
  • Understanding on the security protocols such as SSL/TLS, SSH, CMP, KMIP
  • Understanding and experience with the cryptography fundamentals, Digital Certificates, CRL/OCSP, PKI and PKCS standards (PKCS #5, #7, #8, #10, #11 and #12)
  • Understanding the of database protection functionality including the Native Encryption and Transparent Data Encryption.
  • Understanding on the various operating systems and file systems such as RHEL, Windows, NFS, GPFS, HDFS.
  • Exposure and understanding on Big Data, Cloudera, Hortonworks platforms protection.
  • Verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills along with the ability to present complex security subjects to internal work groups and projects.
  • Ability to work independently and manage one's time with minimal direction from supervisor
  • The ability to work effectively with other functional areas and understand the operational and cultural issues relevant to achieving superior results
  • Must be flexible and able to manage multiple tasks and priorities on very tight deadlines.
  • Be a self-motivated and results oriented individual with an attention to driving aggressive project timelines and schedules.
  • Ability to work independently and in collaboration with others to achieve a high level of success.
  • Sound interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
  • Provide onsite support of encryption technologies such as general purpose and payment HSMs. 
  • Support and facilitate the Global Key Custodian Program

Additional Information

Work Hours:

  • This position requires the incumbent to be available during core business hours.
  • Flexibility to work after hours and weekends (Will be part of an on-call rotation)

Travel Requirements

This position requires the incumbent to travel for work 0-5% of the time

Physical Requirements

This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers, reach with hands and arms, and bend or lift up to 25 pounds.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Privacy Policy