Company Description Founded by experienced entrepreneurs and engineers in 2016, Pismo is a technology company that provides a comprehensive processing platform for banking, card issuing and financial market infrastructure and helps customers innovate and build the next generation of banking and payment solutions. Pismo joined Visa in 2024. Leveraging Visa’s solutions, our core platform, and an expanding suite of capabilities, Pismo addresses the technological challenges that large banks, marketplaces, and fintech companies face in migrating from legacy systems to more advanced technology in the market. Pismo’s cloud-based platform empowers firms to build and launch financial products rapidly, scaling as they grow to have a broader audience while keeping high security and availability standards. Pismo’s 500+ employees are located in more than 10 countries around the world. Job Description The Cybersecurity Engineer – Cloud is responsible for designing, implementing, and operating security controls that protect cloud‑native platforms and workloads across public cloud environments (AWS, Azure, GCP). The role partners closely with engineering, DevOps, and architecture teams to ensure cloud services are secure by design, compliant with regulatory requirements, and resilient at scale. This position combines hands‑on engineering, security architecture, and risk‑based decision‑making within complex, distributed, and regulated environments. In addition to cloud security responsibilities, this role provides security oversight and engineering support for AI‑enabled capabilities used across the Pismo platform. The engineer ensures that adoption of Artificial Intelligence and Large Language Models (LLMs) is aligned with Visa security controls, Pismo data‑protection principles, and global regulatory expectations. This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice. Qualifications Basic Qualifications: 5+ years of relevant work experience with a Bachelor’s Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience. Preferred Qualifications Experience operating in regulated or high‑availability environments is strongly preferred. Multicloud Security Expertise (Core Requirement) Proven ability to design, review, and implement security controls across multicloud environments, including: Cloud Identity and Access Management (IAM), least‑privilege access, and workload identity Network segmentation, service‑to‑service authentication, and mTLS Cloud encryption models and key management (KMS, HSM, certificate authorities) Experience with Cloud Security Posture Management (CSPM) and misconfiguration detection. Understanding of cloud‑native logging, monitoring, and detection capabilities Infrastructure, Container & Platform Security Hands‑on experience securing: Kubernetes and container platforms Container image scanning and runtime security Infrastructure‑as‑Code (Terraform, CloudFormation, ARM) Ability to embed security controls into CI/CD pipelines and platform guardrails. Familiarity with configuration‑drift detection and continuous compliance. Application & Data Protection Strong understanding of: API security (OAuth/OIDC, token‑based auth) Application‑level encryption, tokenization, and hashing Data protection across storage, database, and file‑system layers Ability to support secure software development lifecycle (SSDLC) practices, including SAST, SCA, and SBOM Risk, Compliance & Governance: Working knowledge of security and compliance frameworks such as PCI DSS, ISO 27001, SOC 2, GDPR, or NIST. Ability to translate security findings into risk‑based recommendations for engineering and leadership. Experience partnering with architecture, risk, and compliance teams Tools, Technologies & Certifications (Preferred): Experience with cloud‑security tooling (e.g., CSPM, container security, IAM platforms). Cloud or security certifications are preferred but not mandatory, including: CCSK / CCSP AWS, Azure, or GCP Security certifications CISSP or equivalent Continuous learning mindset aligned with evolving multicloud security practices. Deep Knowledge of LLM Platforms (Mandatory) Demonstrated hands‑on and architectural knowledge of enterprise‑grade AI and LLM platforms, including: Anthropic Claude OpenAI (ChatGPT, GPT APIs, enterprise offerings) Comparable LLM providers and managed AI services This includes understanding: Platform security models and shared‑responsibility boundaries API‑based consumption vs managed SaaS usage Enterprise controls for data handling, logging, and access enforcement Additional Information Work Hours: Varies upon the needs of the department. Travel Requirements: This position requires travel 5-10% of the time. Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers. Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law. Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code. U.S. APPLICANTS ONLY: The estimated salary range for this position is 145,300.00 to 232,700.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program. - Job Family Group: Engineering and Technology

• Act as hands-on technical lead for Cloud Security engineering • Own the Cloud Security engineering roadmap and operating cadence • Provide hands-on technical leadership for security engineering initiatives end-to-end • Build and mature Zero Trust controls • Establish logging, detection, and response engineering • Lead technical incident response for cloud and identity events • Own cloud vulnerability management and secure configuration • Implement data security and governance controls • Drive endpoint and device security strategy • Own secure SDLC and CI/CD controls for cloud/platform delivery using GitHub • Own Cloud Security outcomes end-to-end • Partner with GRC/Compliance to translate requirements into implementable technical controls • Manage security tooling and service relationships • Establish the team’s operational model • Mentor and level-up engineers and administrators

• Lead, develop, mentor, and manage the activities of security analysts and individual contributors for the Alkami Cybersecurity Fusion Center team. • Execute and improve the core functions of the SOC, including threat detection and prevention, analysis, incident response, systems and network security monitoring, investigations, and data leakage prevention. • Oversee SIEM processes for monitoring, investigative techniques, use case development, monitoring dashboards, and health checks for optimization and assurance of logging all required devices. • Research, develop, and maintain industry knowledge of new tools, techniques, industry best practices (CIS, CSA, NIST), and process improvements for the detection, analysis, and response to new and emerging security threats. • Develop and publish security operational metrics and dashboards and provide input to departmental KPI's and performance goals. • Own and improve key operational measures including MTTD and MTTR, using those metrics to drive performance, process refinement, and team accountability. • Manage detection engineering priorities including alert tuning, use case development, detection coverage, and false positive reduction across core security platforms. • Maintain and operationalize threat intelligence feeds to improve detection logic, triage quality, and response effectiveness. • Participate as required during oversight activities by outside regulators, auditors, clients, and other stakeholders as appropriate. • Partner with senior members of the Offensive Security team to ensure focus on testing, verifying, and validating existing security controls. • Manage the vulnerability management program and partner across the organization to drive remediation, accountability, and risk reduction. • Ensure security analysts investigate and respond to cybersecurity incidents and alerts following established playbooks and documented procedures. • Drive continuous improvement of security playbooks, alerting logic, false positive reduction, and reporting to improve operational effectiveness. • Provide recommendations based on emerging threats, threat intelligence, and observed trends to improve Alkami’s defensive posture and response readiness. • Partner with Tier II analysts, Security Engineering, and other internal teams as necessary to diagnose problems, resolve time-critical issues, and improve response capability.

Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families. Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful. The Opportunity We are looking for a SIU Investigator (mid-level). This is a desk position. Within defined guidelines and framework, protects USAA and our members from potential fraudulent claims by investigating questionable, suspect claims activity in compliance with state insurance fraud-related laws and regulations and policies and procedures. The candidate selected will have strong multi-line SIU Investigation experience. This role is remote eligible. However, you must live in the assigned territory which is ME, VT, NH, MA, CT, RI, DE, MD or Washington DC. There may be occasional business travel. What you'll do: - Applies knowledge and understanding of fraud schemes and investigation strategies on any questionable or suspect first or third part claims. - Participates in the development of fraud prevention strategies. - Applies knowledge of P&C insurance industry products, services, and processes in investigating claims to include P&C insurance policy contracts, coverages and internal claims handling process and procedures. - Applies knowledge of state laws and regulations pertaining to insurance fraud in investigating claims. - Collects evidence of potential fraud through field or remote interviews and thorough searches of investigative databases, internal resources, Internet resources, public records, and forensic tools. - Makes recommendations within defined authority guidelines. - Prepares and presents detailed and comprehensive verbal and written investigative reports summarizing the results of the investigation and recommended outcome. - Develops and maintains external relationships with industry, law enforcement and other contacts involved in fraud investigation, detection, and prevention. - May serve as a resource team member on specific matters through demonstrated skill or training. - Assists with the delivery of fraud awareness training initiatives in a defined environment. - Handles CAT duty responsibilities as business requires. - Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures. What you have: - High School Diploma or General Equivalency Diploma (GED). - 2+ years claims adjusting experience, or P&C SIU/Fraud Investigation experience OR 4+ years prior investigative law enforcement (to include military) or relevant fraud industry investigation experience. - Proven investigatory skills. - Experience obtaining statements from various parties to incidents, witnesses, and suspects. - Ability to gather broad range of evidence and draw conclusions based on the objective details related to the applicability of fraud. - Demonstrated ability to organize and prioritize workload, performing multiple tasks and devising solutions to problems. - Familiarity with using computers and various software packages to enter and extract data for analysis from relevant data sources and systems. - Knowledge of city, state and local regulations, legal concepts, understanding of contracts, case law, medical treatment, and medical terminology. What sets you apart: - SIU experience conducting low to complex PNC fraud investigations OR a combination of Claims and Law Enforcement Investigations OR Military Investigative experience. - Strong background with multi-line SIU investigations - Designations such as CFE, CIFI, SCLA, ACLS, FCLS, LPCS, AIC, CPCU, CCLS, or other. - US military experience through military service or a military spouse/domestic partner Compensation range: The annualized range for this position is: $77,120 - $147,390. This is an hourly position. USAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, F-1, STEM OPT Training Plans, etc.). Compensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position. The actual salary for this role may vary by location. Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors. The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job. Benefits: At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals. For more details on our outstanding benefits, visit our benefits page on USAAjobs.com Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting. USAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.