Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Information Security Engineer
Job Description Summary
To support our continued growth and success, we are seeking a Senior Information Security Engineer to assist in all operational aspects of our security program. The ideal candidate will have solid experience in information security technologies including; incident, vulnerability and threat management as well as excellent communication and technical abilities. If you are looking for a challenge that will allow you to collaborate within dynamic teams and work in a fast-paced environment, this position is for you.

Responsibilities:

• Contribute as a senior team member of Information Security Operations professionals
• Invite collaboration with both technical and business stakeholders advising on our security standards, policies and industry trends to help the business and customers succeed.
• Develop relationships to share knowledge and influence security objectives while being inclusive to all stake holders.
• Improve and maintain security services, focused on review efficiency, standards definition, and change management correctness.
• Maintain operational security posture through incident management, vulnerability management, key management, identity and access management, etc.
• Respond to security incidents, manage the process and escalate as required.
• Perform various security service functions including internal vulnerability scans, user access review, configuration and hardening validation and automation of many of these tasks within our SIEM.
• Document risk and mitigation controls, including policy/procedure updates.
• Participate in audits and assessments and provide support, as appropriate.
• Analyze established operational security controls and procedures and recommend improvements.
• Evaluate appropriate tools for supporting the security operations function.
• Participate in security on-call rotation.

Preference will be given to candidates with working experience in the following:

• Extensive Linux administration and troubleshooting experience.
• Extensive Network technology administration and troubleshooting experience.
• Low level PKI management and troubleshooting.
• CyberArk PIM.
• HSM for example Luna 7 or related appliances.
• KeySecure NAE,KMIP and related services.
• Splunk and Rsyslog filtering.
• Hashicorp Vault as it pertains to secret and PKI management.
• SIEMs like QRadar/Splunk ES/LogRhythm or related technologies

What you bring:

• Bachelor’s Degree or equivalent experience/certification
• Windows and Linux/UNIX administration experience
• Solid understanding and troubleshooting is the ISO layer protocols.
• Working understanding of cryptography.
• Excellent verbal and written communication skills.
• Experience working in a PCI DSS, SOC or HIPPA environment
• Knowledge of all security domains including hardware security modules, single-sign on, and identity management.
• Preference will be given to candidates with the following certifications: CISSP, CCSP, CSSLP, OSCP, CISM etc.

Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.
Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Responsibilities:

• Contribute as a senior team member of Information Security Operations professionals
• Invite collaboration with both technical and business stakeholders advising on our security standards, policies and industry trends to help the business and customers succeed.
• Develop relationships to share knowledge and influence security objectives while being inclusive to all stake holders.
• Improve and maintain security services, focused on review efficiency, standards definition, and change management correctness.
• Maintain operational security posture through incident management, vulnerability management, key management, identity and access management, etc.
• Respond to security incidents, manage the process and escalate as required.
• Perform various security service functions including internal vulnerability scans, user access review, configuration and hardening validation and automation of many of these tasks within our SIEM.
• Document risk and mitigation controls, including policy/procedure updates.
• Participate in audits and assessments and provide support, as appropriate.
• Analyze established operational security controls and procedures and recommend improvements.
• Evaluate appropriate tools for supporting the security operations function.
• Participate in security on-call rotation

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines