Warsaw, POLAND, Poland
1 day ago
Cybersecurity Engineer - Firewall

Company Description

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Job Description

Cyber Security Engineering - Network Security Operations department provides operational support for inline cyber security defenses including firewalls, proxies and DDOS appliances as well as integration of those platforms as required. The successful candidate will be responsible for solving complex problems and taking a broad perspective to identify innovative solutions. This role serves as a technical/functional specialist and requires a high-level proficiency in networking and network security disciplines.

 

Essential Functions

Day-to-day support and administration of network firewalls, internet proxies and DDOS mitigation systems in a global, highly complex and fast evolving network

Provide technical coordination and serve as escalation point for complex technical issues

Provide recommendations to management team to increase effectiveness of organization and technology solutions

Perform troubleshooting to resolve and identify root cause of production issues in the shortest possible timeframe

Implement product upgrades, patches and capacity expansions

Update firewall rules/policies to meet security requirements, creating and supporting rules design via systems automation. To include optimization, ownership, expiry and certification, across multiple vendor platforms

Coordinate with the Security Review team and application owners to define new global rules and rules design decisions

Take implementation accountability and ownership of assigned project tasks and ensure all objectives meet stringent operational guidelines

Ensure compliance with defined security requirements. Remediate compliance issues the defined objectives

Ensure timely and accurate reporting and updates for incident, request, change management, and network/firewall assurance programs

Provide technical support for activities that improve the security posture of Visa’s networks

Assist in proof-of-concept phase to deployment, and manage operational acceptance criteria for sustained engineering support for multiple security tools

Work closely with other network, systems, and security teams within Visa, maintaining up to the minute information about the underlying network, security, and systems to make sure the security tool deployments are operating effectively

Work with the Cyber Security division to ensure solutions deployed meet Visa Security Requirements and provide technical assistance for investigation and analysis of security alerts

Collaborate with all internal and 3rd party security and audit teams to implement security controls that protect the Visa brand from real or potential security issues

Work with vendors to establish product recommendations, configuration, implementation and problem management

Build systems to automate deployment, configuration, and reduce human error for repeatable and well understood tasks

Provide recommendations to management team to increase effectiveness of organization and technology solutions

Develop processes and procedures that follow best practices, for use by the Network Security Operations team and third parties in the management of network environments

Develop and position solutions and work with stakeholders to create a roadmap to effectively gain buy-in from all stakeholders

Build and maintain relationships with global and virtual teams and third parties

Some weekend work and participation in on-call rotation as part of global team is required

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.

Qualifications

Basic Qualifications:
• 2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience

Preferred Qualifications:
• 3 or more years of work experience in Infrastructure Cybersecurity with a Bachelor’s Degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)
• Advanced proficiency with two of Checkpoint Firewall-1, Palo Alto firewall technologies, Symantec Blue Coat proxy
• Ability to manage Provider-1 and/or Panorama management and logging systems
• Strong understanding of networks, security technologies, and systems technologies
• Proven ability to troubleshoot problems systematically in complex systems and network environments
• Knowledge of Python syntax and programming
• Understanding of AI/ML concepts, including supervised and unsupervised learning, deep learning, and natural language processing
• Customer focused mindset, excellent communication, interpersonal, and collaboration skills
• Experience with on and off premise DDOS solutions
• Able to use protocol analyzers or packet capture software to diagnose and resolve IP connectivity problems
• Experience with monitoring, tuning, and alerting
• Strong LINUX skills, scripting, automation of tasks and manipulate data via API and Ansible.
• Experience with server platforms, virtualization, containers, and cloud technologies
• Operational knowledge of systems, databases and network security engineering best practices
• ITIL certification preferred. Familiar with ITIL concepts such as Incident, Change, and Problem Management
• Experience with policy orchestration, compliance and automation tools (e.g. Tufin, Skybox)
• Preferred certifications include: CISSP, ITIL, and vendor specific certifications including Check Point Administrator (CCSA), Check Point Engineer (CCSE), Cisco Certified Network Associate (CCNA), Palo Alto Networks Certified Network Security Engineer (PCNSE)

Additional Information

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Confirm your E-mail: Send Email