Sr. Cybersecurity Analyst

Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories. The role is within Cybersecurity’s Global Business-to-Business Identity & Access Management (B2B IAM) team, which secures access to Visa’s business portals and associated services worldwide.

• 5+ years of relevant work experience with a Bachelor's Degree, or 2+ years with an advanced degree, or 0 years with a PhD; alternatively, 8+ years relevant experience.
• Familiarity with web/application servers: Apache HTTP Server, Microsoft IIS, Apache Tomcat; exposure to NGINX or JWS is a plus.
• Knowledge of LDAP concepts and basic directory administration.
• Understanding of Linux fundamentals and basic Windows Server administration.
• Experience with monitoring/logging tools such as Splunk, Elastic/Kibana, Grafana, and Prometheus.
• Understanding of SSO/federation standards: SAML 2.0, OpenID Connect, OAuth 2.0, and MFA concepts.
• Working knowledge of software development practices: Git, pull requests, basic scripting in Shell/Python, issue/change tracking in Jira.
• Strong collaboration and communication skills with globally distributed teams.
• Awareness of release/change management and safe deployment patterns.

Nice to have:

• Hands-on academic/internship experience integrating SSO or configuring IAM platforms (ForgeRock AM/DS preferred).
• Exposure to API authentication concepts (OAuth 2.0 flows, JWT) and mTLS basics.
• Familiarity with web/security architecture fundamentals (TLS, reverse proxies, load balancers, WAF concepts).
• Basic CI/CD and infrastructure as code experience (e.g., Jenkins, GitHub Actions, Terraform).
• Experience writing automation scripts in Shell, Python, or Groovy.
• Awareness of incident/change/problem management processes in IAM operations.
• Understanding of GDPR, PCI DSS, and ISO/IEC 27001 compliance related to access controls, logging, and data handling.

• Support SSO integrations on ForgeRock Access Management (AM): apply standard configs, run integration tests, and triage issues.
• Assist in setting up and maintaining federation using SAML 2.0, OpenID Connect, and OAuth 2.0.
• Contribute to authorization policy updates and build adaptive authentication trees/journeys in ForgeRock AM.
• Participate in AM environment operations including configuration changes, hardening, and tuning.
• Validate and tune session management configurations across regions.
• Assist with ForgeRock Directory Services (DS): health checks, replication verification, user/directory sync jobs, and backups.
• Maintain LDAP settings and write simple automation scripts (Shell/Python) for repetitive tasks.
• Execute performance and load test plans and highlight bottlenecks.
• Deploy and manage ForgeRock web/app server agents across IIS, Apache HTTP Server, NGINX, Apache Tomcat, Node.js, and JBoss Web Server (JWS).
• Implement and support Multi-Factor Authentication (MFA) rollouts, monitor success/error rates and assist with troubleshooting.
• Provide L2 operational support on rotation, document KB articles, and escalate appropriately.
• Produce clear documentation including change records, runbooks, and operational notes.
• Collaborate with globally distributed teams, participate in change/release cadences, and escalate urgent issues.

Visa is an EEO employer providing equal employment consideration without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status. Visa considers qualified applicants with criminal histories consistent with EEOC guidelines and applicable local law.