Cybersecurity Engineer - Firewall

Cyber Security Engineering - Network Security Operations department provides operational support for inline cyber security defenses including firewalls proxies and DDOS appliances as well as integration of those platforms as required. The successful candidate will be responsible for solving complex problems and taking a broad perspective to identify innovative solutions. This role serves as a technical/functional specialist and requires a high-level proficiency in networking and network security disciplines.

Essential Functions

• Day-to-day support and administration of network firewalls internet proxies and DDOS mitigation systems in a global highly complex and fast evolving network

• Provide technical coordination and serve as escalation point for complex technical issues

• Provide recommendations to management team to increase effectiveness of organization and technology solutions

• Perform troubleshooting to resolve and identify root cause of production issues in the shortest possible timeframe

• Implement product upgrades patches and capacity expansions

• Update firewall rules/policies to meet security requirements creating and supporting rules design via systems automation. To include optimization ownership expiry and certification across multiple vendor platforms

• Coordinate with the Security Review team and application owners to define new global rules and rules design decisions

• Take implementation accountability and ownership of assigned project tasks and ensure all objectives meet stringent operational guidelines

• Ensure compliance with defined security requirements. Remediate compliance issues the defined objectives

• Ensure timely and accurate reporting and updates for incident request change management and network/firewall assurance programs

• Provide technical support for activities that improve the security posture of Visas networks

• Assist in proof-of-concept phase to deployment and manage operational acceptance criteria for sustained engineering support for multiple security tools

• Work closely with other network systems and security teams within Visa maintaining up to the minute information about the underlying network security and systems to make sure the security tool deployments are operating effectively

• Work with the Cyber Security division to ensure solutions deployed meet Visa Security Requirements and provide technical assistance for investigation and analysis of security alerts

• Collaborate with all internal and 3rd party security and audit teams to implement security controls that protect the Visa brand from real or potential security issues

• Work with vendors to establish product recommendations configuration implementation and problem management

• Build systems to automate deployment configuration and reduce human error for repeatable and well understood tasks

• Provide recommendations to management team to increase effectiveness of organization and technology solutions

• Develop processes and procedures that follow best practices for use by the Network Security Operations team and third parties in the management of network environments

• Develop and position solutions and work with stakeholders to create a roadmap to effectively gain buy-in from all stakeholders

• Build and maintain relationships with global and virtual teams and third parties

• Some weekend work and participation in on-call rotation as part of global team is required

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.

Qualifications :

Basic Qualifications:
2 years of relevant work experience and a Bachelors degree OR 5 years of relevant work experience

Preferred Qualifications:
3 or more years of work experience in Infrastructure Cybersecurity with a Bachelors Degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters MBA JD MD)
Advanced proficiency with two of Checkpoint Firewall-1 Palo Alto firewall technologies Symantec Blue Coat proxy
Ability to manage Provider-1 and/or Panorama management and logging systems
Strong understanding of networks security technologies and systems technologies
Proven ability to troubleshoot problems systematically in complex systems and network environments
Knowledge of Python syntax and programming
Understanding of AI/ML concepts including supervised and unsupervised learning deep learning and natural language processing
Customer focused mindset excellent communication interpersonal and collaboration skills
Experience with on and off premise DDOS solutions
Able to use protocol analyzers or packet capture software to diagnose and resolve IP connectivity problems
Experience with monitoring tuning and alerting
Strong LINUX skills scripting automation of tasks and manipulate data via API and Ansible.
Experience with server platforms virtualization containers and cloud technologies
Operational knowledge of systems databases and network security engineering best practices
ITIL certification preferred. Familiar with ITIL concepts such as Incident Change and Problem Management
Experience with policy orchestration compliance and automation tools (e.g. Tufin Skybox)
Preferred certifications include: CISSP ITIL and vendor specific certifications including Check Point Administrator (CCSA) Check Point Engineer (CCSE) Cisco Certified Network Associate (CCNA) Palo Alto Networks Certified Network Security Engineer (PCNSE)

Additional Information :

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Remote Work :

No

Employment Type :

Full-time