Senior Red Team Analyst

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

The Pismo Red Team is responsible for identifying and managing security risks and vulnerabilities across applications, APIs, cloud environments, and products. Through offensive security assessments, penetration testing, and continuous collaboration with engineering and cybersecurity teams, the squad helps strengthen Pismo's security posture and supports the secure development lifecycle by proactively uncovering weaknesses before they can be exploited.
 

Senior Red Team Analyst leverage AI, automation, and offensive security techniques to improve assessment efficiency and strengthen security operations across mission-critical core banking and financial technology platforms. The role requires strong communication and stakeholder management skills to identify risks, influence remediation efforts, and drive scalable security solutions. The position also ensures the overall health of the corporate environment by adhering to regulatory and compliance requirements, including ISO 27001 and PCI DSS.

What You'll Do

• Penetration testing and security assessments
• API, web-application, and cloud security testing
• Vulnerability identification and risk management
• Security reviews of microservices and distributed systems
• Collaboration with engineering and cybersecurity teams
• Security findings reporting and remediation guidance
• AI-assisted security analysis and research
• Security automation and tooling development
• Security documentation and procedures maintenance
• Compliance support (PCI DSS, ISO 27001, etc)
• Threat research and offensive security techniques
• Stakeholder communication and security awareness
• Continuous improvement of Red Team processes and methodologies.

This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice. #LI-Remote

Qualifications

Basic qualifications

• 5+ years of relevant work experience with a Bachelor's Degree or 2+ years of relevant work experience with an Advanced degree (e.g. Masters/MBA/JD/MD) or 0 years relevant work experience with a PhD.
• B1 English level for conversation.
• 3+ years experience working in offensive security, penetration testing or vulnerability assessment roles.
• Experience collaborating with development teams and cybersecurity squads to identify, communicate and remediate security findings.
• Basic understanding of application security risks across APIs, microservices, and distributed systems.
   

Technical skills

• Strong automation and scripting skills, with experience developing tools, workflows, or processes that reduce manual effort and improve the scalability of security operations.
• Knowledge of OWASP Top 10 and NIST SP 800-115 security testing standards.
• Basic knowledge of PCI DSS requirements and experience working in regulated environments.
• Basic knowledge of AWS services and cloud environments.
   

Preferred qualifications

• Verbal and written communication skills, with the ability to clearly explain technical findings, influence remediation efforts, collaborate across teams, and communicate effectively with both technical and non-technical stakeholders.
• Experience supporting mission-critical systems within the financial services industry, with a strong focus on availability, resilience, and security.
• Strong documentation skills, including the ability to create and maintain security reports, procedures, and technical documentation.
• Familiarity with ISO 27001 security controls and audit requirements.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.