Senior Information Security Engineer

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Senior Information Security Engineer

Senior Information Security Engineer

Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mission First, People Always

As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.
By taking care of our people, their well-being, and career development, we provide them with the necessary tools and environment to ensure the success of our mission.

Overview
The Business Security Enablement (BSE) team is looking for a Senior Information Security Engineer to join our team. The Business Security Enablement Guild is a worldwide team of information security experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do. The ideal candidate should have considerable expertise in information security and secure engineering disciplines with a primary focus on product and cloud security.


In this role, you will:
• Monitor and detect cyber security threats and incidents
• Support the operation of a comprehensive cloud security solution
• Work with project teams to scope and deliver security-related solutions
• Provide evidence of compliance for our audited environments
• Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems
• Prepare and present business/technical presentations
• Ensure established security policies and standards are observed on projects
• Work closely with the Security Operations Center (SOC), Security Engineering, Application and Cloud support teams to improve existing security monitoring and deliver resilient and comprehensive security solutions to support cloud environments


All About You
• Demonstrate technical competency in cloud security posture management based on hands-on experience or relevant qualifications
• Familiarity with Indicators of Compromise (IoCs), Indicators of Attack (IoAs), ATT&CK Tools, Techniques and Procedures (TTPs)
• Demonstrate a broad awareness of security engineering concepts and practices across all phases of the software development lifecycle
• Strong understanding of information security, risk and data privacy
• Demonstrate the ability to articulate and communicate effectively to diverse audiences and properly translates security and risk management terminology into business terms and recommend alternative solutions to stakeholders
• Working knowledge of symmetric and asymmetric encryption, Digital Certificates, SSL, VPN, IPSec, and other security tools and processes such as privileged identity management, file integrity, audit, logging and IDS/IPS
• Ability to understand technical analysis that demonstrates the effectiveness of security enforcing technologies
• Strong interpersonal skills, including good communication with the ability to articulate ideas in a precise and concise manner
• Flexible to provide on-call support 24/7 in the future if required

Required Skills
• Application security
• Security Operations
• Cloud security
• Moderate hands-on scripting experience

Additional Nice to Have
• Appli