1 day ago
Base Salary
$119k - $184k/yr
Responsibilities
- Design, build, deploy, maintain, and operate production GenAI security services and APIs.
- Detect and mitigate prompt injection, jailbreaks, sensitive-data exposure, unauthorized tool use, and unexpected agent behavior across LLMs, agents, tools, APIs, MCP servers, plugins, and enterprise data sources.
- Build automated evaluation, testing, feedback, observability, logging, metrics, tracing, alerting, and dashboard capabilities.
- Containerize and deploy services with Docker and Kubernetes and integrate them into enterprise applications, model gateways, developer workflows, and cloud or on-premises platforms.
- Apply threat modeling, secure coding, dependency and secrets management, code review, and vulnerability remediation.
- Evaluate emerging GenAI security technologies through proofs of concept and provide technical guidance and engineering standards.
- Collaborate across engineering, research, architecture, product, infrastructure, and cybersecurity teams while supporting releases, incident analysis, and defect resolution.
Requirements
- At least 2 years of relevant work experience with a bachelor's degree, or at least 5 years of relevant work experience.
- Professional experience building backend services, APIs, platforms, or distributed applications.
- Production software-development experience with Python, Java, Go, or another modern programming language.
- Experience in cybersecurity, secure software development, application security, cloud security, AI security, or a closely related discipline.
- Strong Python proficiency and at least one additional language such as Java, Go, or Rust.
- Experience with distributed-systems fundamentals and highly available RESTful, asynchronous, or event-driven services.
- Hands-on experience with Generative AI application architectures, including LLM APIs, embeddings, agentic workflows, tool calling, model gateways, orchestration frameworks, MCP, AI-agent tools, or plugins.
- Understanding of GenAI security risks and experience implementing controls such as input validation, output filtering, policy enforcement, access control, audit logging, rate limiting, and secrets management.
- Knowledge of secure software-development lifecycle practices, threat modeling, vulnerability management, and application-security principles.
- Experience developing LLM evaluation frameworks or test suites, including adversarial or red-team testing, regression testing, and false-positive/false-negative analysis.
- Experience with cloud-native deployment and operations, infrastructure automation, and observability platforms.
- Familiarity with GPU-backed inference, CUDA, NVIDIA technologies, or model-serving frameworks is beneficial but not required.
- Ability to evaluate technologies against security, quality, latency, scalability, maintainability, and operational-readiness criteria and work independently on ambiguous assignments.
- Clear written and verbal communication skills and experience collaborating in Agile, cross-functional environments.
Benefits
- Medical, dental, vision, 401(k), FSA/HSA, life insurance, paid time off, and wellness program may be available.
- Hybrid work model based in Ashburn, Virginia, requiring at least 3 days in the office; exact days are confirmed by the hiring manager.
- No relocation budget is available.
- The position requires 5–10% travel.
- Work hours vary according to department needs.
About Visa
Visa builds and operates a global digital payments network that connects consumers, merchants, financial institutions, and governments. It earns fees for processing card transactions and offering risk, data, and value‑added services through VisaNet and products like tokenization and tap‑to‑pay. Founded in 1958 and headquartered in Foster City, California, Visa is a public company (NYSE: V) serving clients in more than 200 countries and territories.