Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Safeguard Pismo’s cloud-native infrastructure, platforms, and services by designing, implementing, monitoring, and continuously enhancing cloud security capabilities.

• Oversee and enhance the security posture of cloud environments and associated infrastructure.

• Investigate and respond to security alerts, suspicious activities, and incidents related to cloud security.

• Assist in detection engineering and augment security monitoring capabilities.

• Conduct threat analysis and work alongside incident response teams during investigations.

• Create and maintain operational security metrics, dashboards, and reporting systems.

• Evaluate cloud architectures and offer security guidance during the design and implementation phases.

• Incorporate secure-by-design principles into cloud services and infrastructure.

• Assess new technologies and cloud services for potential security risks and compliance needs.

• Deploy security controls across cloud-native and containerized environments.

• Review and monitor privileged access; promote least-privilege and role-based access control.

• Identify excessive permissions and collaborate with stakeholders to mitigate access risks.

• Enhance authentication, authorization, and credential management processes in conjunction with IAM teams.

• Identify, prioritize, and monitor the remediation of vulnerabilities within cloud infrastructure.

• Execute security assessments of cloud resources and configurations.

• Confirm compliance with secure configuration baselines and security standards.

• Address security findings with engineering teams within the agreed timelines.

• Implement automated security controls in CI/CD pipelines.

• Enhance infrastructure-as-code security practices and automated compliance monitoring efforts.

• Develop security use cases and automation playbooks.

• Engage in AI and automation initiatives to bolster security operations and risk management.

• Assist with audits, certification programs, and client security assessments.

• Provide technical evidence and documentation for ISO 27001, SOC 1, SOC 2, PCI DSS, and other relevant frameworks.

• Conduct cloud security risk assessments and facilitate remediation planning.

• Implement and verify controls mandated by internal policies and regulatory requirements.

• Collaborate with Security Architecture, Infrastructure, Engineering, Product, and Compliance teams.

• Participate in cloud security projects and strategic security initiatives.

• Contribute to security awareness programs and knowledge-sharing activities.

• Mentor junior analysts and assist in developing cloud security capabilities.

⛳️ Requirements

• 5+ years of relevant work experience with a Bachelor’s Degree OR at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) OR 0 years of work experience with a PhD OR 8+ years of relevant work experience.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

• Minimum of 5 years of experience in Cloud Security, Cybersecurity, Security Engineering, Infrastructure Security, or Security Operations.

• Practical experience securing AWS cloud environments, including aspects of network security, IAM, encryption, logging, monitoring, and security services.

• Experience in implementing and operating cloud security controls across at least one major cloud platform: AWS, Azure, or GCP.

• Strong understanding of IAM, key management and encryption, network segmentation and security, container and Kubernetes security, IaC, and DevSecOps practices.

• Experience with cloud security monitoring, threat detection, incident response, and vulnerability management.

• Experience conducting cloud security assessments, risk assessments, and reviews of security controls.

• Experience supporting Information Assurance, audit readiness, compliance assessments, and control validation activities.

• Familiarity with ISO 27001, PCI DSS, SOC 1, SOC 2, CIS Controls, and the NIST Cybersecurity Framework.

• Excellent communication, stakeholder management, and technical documentation skills.

• Experience with multiple cloud providers (AWS, Azure, and/or GCP).

• AWS Certified Security – Specialty.

• AWS Solutions Architect Associate/Professional.

• Microsoft Certified: Azure Security Engineer Associate.

• Certifications such as CISSP, CCSP, CISM, CRISC, or GIAC.

• Experience working within banking, payments, fintech, or other heavily regulated industries.

• Experience assisting with PCI DSS, PCI PIN Security, SOC, ISO 27001, and regulatory examinations.

🏝️ Benefits

• Fully remote position; remote roles do not necessitate job duties to be performed near a Visa office location.

• Presence at a Visa office may be required with scheduled notice.