Cybersecurity Associate Analyst

Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters — to you, to your community, and to the world.

Progress starts with you.

The Identity and Access Management (IAM) team is responsible for securing employee access to our core applications in the most efficient, compliant, and user-friendly manner, innovatively using the latest industry standards and tools. Our goal is to become the gold standard for IAM worldwide, and we are already on our way, winning Oracle’s annual Identity Management Innovation award.
Visa's IAM eco-system includes an extensive, and highly customized, rich Identity Management platform implementation. The team has successfully implemented many of the core components. With a constant moving and expending environment, the IAM team is exploring all processes and technology to expand the security coverage and improve the end user experience. With the additional features and the goal of extensive coverage comes a higher level of complexity, criticality, overall usage, and dependency on the environment.

Join a growing, fast paced and high-performance Access Controls team. The ideal candidate for the position will be a proactive and self-motivated professional who will work with other team members to manage access controls for Visa key information resources residing on multiple platforms, with a focus area in multiple Linux and automation. The successful candidate will aid in the continuous improvement of the identity and access management practices looking for opportunities to automate where possible.

Essential Functions:

• Govern access controls for cloud platforms, including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).
• Provide Subject Matter Expertise (SME) over IAM practices, policies, and procedures for UNIX and Cloud Platforms.
• Demonstrate proficiency .NET development and in scripting languages such as PowerShell or Python for IAM processes automation.
• Implement and enforce Identity and Access Management policies in UNIX, ensuring access approvals, rogue access monitoring, credential strengthening and security (including passwords, SSH keys, and Keytabs), credential reuse monitoring, as well as support for the full lifecycle of identities and access.
• Complete access request processing as per pre-defined procedures and within agreed Service Level Agreements (SLAs). Resolve problem tickets and assist other security analysts as needed.
• Identify opportunities to automate existing manual processes using Generative AI and scripting, specifically within Access and Identity Management practices.
• Diligently document access management procedures for assigned platforms, databases, and applications. Keep the access management procedures up to date.
• Provide incident response and remediation for identity-related security incidents.
• Assist with developing robust monitoring and alerting mechanisms for identity and access management activities.
• Develop new management metrics and concise reporting to support IAM activities.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.

Basic Qualification:
Bachelor's degree, OR 3+ years of relevant work experience

Preferred Qualifications:
2 or more years of work experience.
2 or more years of work experience in Cybersecurity, with a strong focus on Identity and Access Management (IAM).
Experience with UNIX management, including Role Base Access Control (RBAC), Service Account and Group Management and SSH Keys.
Hands on experience in managing and securing Cloud environments from a UNIX context.
CISSP, CCSP and/or Certification in Cloud Platforms are highly desirable.
Understand security principles such as separation of duties (SoD) and least privilege (LP)
Experience in implementing and managing Credential Security using ERPM and Password Safe.
Proficient in automating repetitive IAM Processes using Generative AI and scripting languages such as PowerShell or Python to improve operational efficiency.
Knowledge of automation tools and frameworks to streamline access management practices.
Experience with SIEM/CIEM tools for security monitoring, incident response and identity management.

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

U.S. APPLICANTS ONLY: The estimated salary range for this position is 88,000.00 to 136,900.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.