Senior Cybersecurity Engineer (SW Dev - Network/Firewall Automation)

Company Description

Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

Job Description

Visa's Cyber Engineering team is looking for a Sr. level developer focused on Software engineering with a passion for Network & Firewall Automation & Cybersecurity solutions, who will be responsible for design, development, and execution of large-scale Cybersecurity Firewall and Network data analysis and automation initiatives. In this position, you are a passionate and talented lead engineer/developer who will independently drive deliverables and utilize complex problem-solving abilities and coding/testing/debugging skills within a team environment.  You must be dedicated to leading efforts, driving timelines & delivering production-ready code in short time frames and willing to go beyond the routine.

Key Responsibilities

• Development of customized code bases that perform in-depth network analysis with Checkpoint & Palo Alto Firewalls, Cisco Router ACL’s, Tufin Network Management Software.   
• Experience with accessing JIRA/Atlassian frameworks via API.
• Strong Network background, with a focus on Cisco Router ACL’s, Firewall Automation & programmatic configuration.
• Comprehensive understanding & proven track record in creating advanced algorithms related to parsing and analyzing: Firewall rules and objects, subnet mask, ACL range operations, Cisco (or equivalent) configuration, F5 configurations.
• Expertise in using Python or an equivalent language.
• Expertise in using the Elastic Stack and Lucene based solutions to perform large scale data analysis on customized data sets.
• Design, engineer, operationalize and maintain the secure systems which support continuous deployment/integration solutions with strong focus towards innovation.
• Have strong problem solving and debugging skills.
• Have strong Firewall configuration & rule/group object understanding and experience in both Checkpoint & Palo Alto Networks
• Have excellent communication and interpersonal skills and above all, you are a team player!
• Mentor and lead the team on various aspect of business and security technologies.

Key Skills Needed:

• Excellent understanding of Tufin Firewall Management technology & Firewall rule life cycle usecases and processes.
• Excellent understanding and experience with configuring rules and group objects within Enterprise level Checkpoint & PaloAlto firewalls.
• Excellent understanding of Network based Cybersecurity concepts.
• Agile development - incorporating Continuous Integration and Continuous Delivery utilizing technologies such as GIT, Maven, Jenkins, Chef, Crucible, Sonar, Junit
• Linux - Strong Linux knowledge.
• Python – Expert level experience with Python with experience using REST or GraphQL based API’s.
• Database – Strong experience with Elastic Search (or an equivalent non-relational database) regarding storing, analyzing & reporting large, structured data sets.
• Network experience: TCP/IP Security concepts, detailed expertise with Cisco/Juniper/F5/Cumulus configurations in Enterprise environments, Firewall Policy Configurations, Routing Protocols, Network Topology Mapping.
• Independent - no micromanaging here, but you must be able to communicate via continuous documentation, JIRA Ticketing updates.
• Configuration Management - Experience with Configuration management tools Such as Ansible/Salt stack/Chef/Puppet.
• Hands on experience as SCRUM/Agile process lead

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Qualifications

Basic Qualifications:
• 5+ years of relevant work experience and a Bachelors degree, OR 8+ years of relevant work experience
• With Bachelors Minimum 8 years of experience in designing and maintaining enterprise infrastructure solutions, with master’s or PhD Minimum 2 years of experience in designing and maintaining enterprise infrastructure solutions.
• 4 years experience in Network Security centric role, with hands on Tufin/Network Security Management tools
• Experience in Project life cycle activities on development and maintenance projects. Including CI/CD and tools development.
• Minimum Bachelor’s degree required from an accredited institution.
• 4+ years in Python or other similar development technology.
• Strong customer centric mindset.
• Proactive sense of urgency and 'can do' attitude
• Strategic thinker who can balance big picture strategy with detailed, flawless execution
• Financial services and card payments experience is a plus
• Excellent communication skills
• Excellent team player
• CISSP, CISA, SANS GPEN, SANS GXPN, SANS GIAC, SANS GREM, OSCP (Offensive Security Certified Professional) is a plus

Additional Information

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.