Cyber Defense Analyst - Incident Response & Threat Hunting

VISA; Ashburn (VA); Hybrid; USD 85,000 - 131,000; Full time

Job summary

Visa is seeking an experienced Incident Responder to join its Cyber Fusion Centers and lead investigations, containment, and remediation of cybersecurity incidents. You will perform in-depth analyses, coordinate with Cyber Defense and Engineering, and contribute to ongoing threat hunting and detection rule development.

The role operates in a 24x7 security operations center with 12-hour shifts. In-office presence is required at least 3 days per week; Visa offers a comprehensive benefits package

Qualifications

• Bachelor's degree, OR 3+ years of relevant work experience.
• Experience working in an enterprise-level incident response team or security operations center.
• Professional experience in cybersecurity or computer network defense roles.
• Experience with GenAI and Agent automation.

Responsibilities

• Manage cybersecurity incidents through all stages: identification, containment, eradication.
• Perform deep-dive analyses on systems, accounts, and networks to determine root cause and impact.
• Engage with broader technology teams including Cyber Defense and Engineering.
• Proactively hunt threats to identify and mitigate potential risks.
• Develop and refine detection rules to improve incident identification and response.
• Provide detailed incident and response action reports and documentation.
• Develop and maintain incident response playbooks and runbooks for standardized response.
• Identify opportunities to improve security incident response processes.
• Support and manage cybersecurity projects to enhance overall security posture.

Skills

Incident response

Security operations

GenAI automation

Cyber threat hunting

Tools

SIEM

EDR

WAF

Packet analysis

Job description

Visa is seeking an experienced Incident Responder to join its Cyber Fusion Centers and lead investigations, containment, and remediation of cybersecurity incidents. You will perform in-depth analyses, coordinate with Cyber Defense and Engineering, and contribute to ongoing threat hunting and detection rule development.

The role operates in a 24x7 security operations center with 12-hour shifts. In-office presence is required at least 3 days per week; Visa offers a comprehensive benefits package