高级红队分析师
Senior Red Team Analyst
我们是Visa，支付技术领域的全球领导者，我们在200多个国家和地区促进消费者、商户、金融机构和政府实体之间的交易，致力于成为最佳的支付和收款方式，让每个人都能受益。
在Visa，你将有机会大规模地产生影响——解决有意义的挑战，提升你的技能，并看到你的贡献如何改变世界各地人们的生活。
加入Visa，做真正重要的工作——对你、对你的社区、对世界都有意义。进步从你开始。
职位描述
Pismo红队负责识别和管理应用程序、API、云环境和产品中的安全风险和漏洞。通过主动安全评估、渗透测试以及与工程和网络安全团队的持续合作，该小组帮助加强Pismo的安全态势，并通过主动发现弱点来支持安全开发生命周期。
高级红队分析师利用人工智能、自动化和主动安全技术，提高评估效率，加强关键核心银行和金融科技平台的安全运营。该职位需要强大的沟通能力和利益相关者管理能力，以识别风险、推动修复工作并制定可扩展的安全解决方案。该职位还通过遵守法规和合规要求（包括ISO 27001和PCI DSS）确保企业环境的整体健康。
你将负责
· 渗透测试和安全评估
· API、网络应用和云安全测试
· 漏洞识别和风险管理
· 微服务和分布式系统的安全审查
· 与工程和网络安全团队协作
· 安全问题报告和修复指导
· AI辅助的安全分析和研究
· 安全自动化和工具开发
· 安全文档和流程维护
· 合规支持（如PCI DSS、ISO 27001等）
· 威胁研究和主动安全技术
· 利益相关者沟通和安全意识提升
· 红队流程和方法的持续改进
这是一个远程岗位。远程岗位不要求工作职责必须在Visa办公室附近完成。远程岗位可能需要在Visa的某个办公地点出现。
查看英文原文
About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Pismo Red Team is responsible for identifying and managing security risks and vulnerabilities across applications, APIs, cloud environments, and products. Through offensive security assessments, penetration testing, and continuous collaboration with engineering and cybersecurity teams, the squad helps strengthen Pismo's security posture and supports the secure development lifecycle by proactively uncovering weaknesses before they can be exploited.
Senior Red Team Analyst leverage AI, automation, and offensive security techniques to improve assessment efficiency and strengthen security operations across mission-critical core banking and financial technology platforms. The role requires strong communication and stakeholder management skills to identify risks, influence remediation efforts, and drive scalable security solutions. The position also ensures the overall health of the corporate environment by adhering to regulatory and compliance requirements, including ISO 27001 and PCI DSS.
What You'll Do
- Penetration testing and security assessments
- API, web-application, and cloud security testing
- Vulnerability identification and risk management
- Security reviews of microservices and distributed systems
- Collaboration with engineering and cybersecurity teams
- Security findings reporting and remediation guidance
- AI-assisted security analysis and research
- Security automation and tooling development
- Security documentation and procedures maintenance
- Compliance support (PCI DSS, ISO 27001, etc)
- Threat research and offensive security techniques
- Stakeholder communication and security awareness
- Continuous improvement of Red Team processes and methodologies.
This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice.
Qualifications
Basic qualifications
- 5+ years of relevant work experience with a Bachelor's Degree or 2+ years of relevant work experience with an Advanced degree (e.g. Masters/MBA/JD/MD) or 0 years relevant work experience with a PhD.
- B1 English level for conversation.
- 3+ years experience working in offensive security, penetration testing or vulnerability assessment roles.
- Experience collaborating with development teams and cybersecurity squads to identify, communicate and remediate security findings.
- Basic understanding of application security risks across APIs, microservices, and distributed systems.
Technical skills
- Strong automation and scripting skills, with experience developing tools, workflows, or processes that reduce manual effort and improve the scalability of security operations.
- Knowledge of OWASP Top 10 and NIST SP 800-115 security testing standards.
- Basic knowledge of PCI DSS requirements and experience working in regulated environments.
- Basic knowledge of AWS services and cloud environments.
Preferred qualifications
- Verbal and written communication skills, with the ability to clearly explain technical findings, influence remediation efforts, collaborate across teams, and communicate effectively with both technical and non-technical stakeholders.
- Experience supporting mission-critical systems within the financial services industry, with a strong focus on availability, resilience, and security.
- Strong documentation skills, including the ability to create and maintain security reports, procedures, and technical documentation.
- Familiarity with ISO 27001 security controls and audit requirements.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.
Originally posted on Himalayas