Security Architect

VulnU; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Equity

Job summary

Visa is seeking a Security Architect to lead security architecture reviews and threat modelling across AWS, EKS, and APIs. You will embed security in CI/CD, shape cloud security for SaaS/PaaS/IaaS, and guide teams on data protection and IAM practices.

You should bring hands-on Penetration Testing experience, familiarity with OWASP Top 10, and strong communication skills to train teams and influence stakeholders.

Qualifications

• Experience leading security architecture reviews and threat modelling using industry standards.
• Experience designing security controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.
• Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.
• Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.
• Understanding of secure development lifecycle methodologies and Agile practices.
• Working knowledge of middleware and development platforms such as Java, C# and .NET.
• Hands-on penetration testing experience is a strong advantage.
• Advanced hands-on use of AI harnesses, automated workflows and engineering integrations beyond conversational chat.
• Experience supporting mergers and acquisitions is a plus.
• Collaboration: cross-functional teams, including cybersecurity, engineering and operations.
• Strong written and verbal communication; Certifications such as CISSP/GIAC/OSCP or willingness to pursue them.

Responsibilities

• Conduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and mitigate them.
• Design and implement security architectures for cloud environments, with a focus on AWS and Kubernetes (EKS).
• Partner with DevOps and software development teams to embed security practices in CI/CD pipelines and throughout the development lifecycle.
• Develop and refine security policies and procedures to strengthen protection and support compliance.
• Assess emerging security threats, tools and methodologies to inform strategic recommendations.
• Provide technical guidance and training to internal teams to strengthen security awareness and practices.

Skills

Security architecture

Threat modelling

AWS

Kubernetes

CI/CD security

Secure SDLC

Java

C#

.NET

Penetration testing

Security tools

Generative AI

M&A experience

Communication

Tools

APIs

SIEM

IAM

Job description

# Security ArchitectVisa · visa.comCategory: Security ArchitectureLocation: GB - London, United Kingdom## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* EquityAbout UsVisa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.Job DescriptionRole Summary:As a Security Architect in the Cybersecurity M&A team, you will secure our platform, applications, operations and product use through security reviews and threat mitigation. You must be an advanced generative AI user, applying AI harnesses, automated workflows and engineering integrations—not just conversational chat.Essential Functions:Conduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and recommend mitigations.Design and implement security architectures for cloud environments, with a focus on AWS and Kubernetes (EKS).Partner with DevOps and software development teams to embed security practices in CI/CD pipelines and throughout the development lifecycle.Develop and refine security policies and procedures to strengthen protection and support compliance.Assess emerging security threats, tools and methodologies to inform strategic recommendations.Provide technical guidance and training to internal teams to strengthen security awareness and practices.Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.QualificationsSecurity Architecture: Experience leading security architecture reviews and threat modelling using industry standards.Security Controls: Experience designing security controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.Development Lifecycle: Understanding of secure development lifecycle methodologies and Agile practices.Technical Knowledge: Working knowledge of middleware and development platforms such as Java, C# and .NET.Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process. Penetration Testing: Hands-on penetration testing experience is a strong advantage.Security Tools: Practical experience with intrusion detection/prevention, firewalls, antivirus, policy enforcement, configuration management, security monitoring, audit or secure application development.Generative AI: Advanced hands-on use of AI harnesses, automated workflows and engineering integrations beyond conversational chat.M&A Activities: Experience supporting mergers and acquisitions before or after deal completion is a plus.Collaboration: Experience working with or supporting cross-functional teams, including cybersecurity, engineering, penetration testing and operations.Communication: Strong written and verbal skills, including documenting findings and communicating with technical and non-technical stakeholders.Certifications: Industry certifications such as CISSP, GIAC or OSCP, or a strong willingness to pursue them.