Senior Information Security Engineer

About Mastercard and Role Summary

Mastercard is a global technology leader in the payment industry, committed to building a sustainable economy that benefits everyone through secure, simple, and smart transaction solutions across over 200 countries. Our Corporate Security team protects Mastercard from cyber and physical threats by embedding security principles into all operations.

The Business Security Enablement Guild is seeking a Senior Information Security Engineer who possesses deep expertise in information security and secure engineering protocols. This role focuses on integrating security by design into Mastercard's next-generation payment applications and services.

Key Responsibilities

• Utilize extensive security knowledge and concepts to perform technology reviews with an emphasis on GenAI-based automation.
• Conduct independent evaluations of third-party technologies and internally developed systems.
• Collaborate with stakeholders to assess business requests for technical feasibility.
• Recommend optimal security solutions that align with regulatory and compliance requirements during system design and enhancement.
• Ensure adherence to established security policies and standards throughout project lifecycles.
• Create and deliver technical and business presentations.
• Offer guidance on secure application and system architecture.
• Design secure mechanisms for critical business functions within cloud infrastructures.
• Partner with development teams to review designs, propose alternatives, and ensure secure development practices.
• Leverage mobile and digital commerce security expertise to support internal Mastercard stakeholders, including project managers and senior leadership.
• Develop security requirements and processes to ensure consistent worldwide practices.
• Contribute to strategy, standards, and architecture for the Secure Development Lifecycle (SDLC), encompassing applications, mobile, web services, DevOps, cloud, GenAI, LLM models, and CI/CD pipelines.

Qualifications and Experience

• Minimum of 5 to 7 years’ experience in information security roles.
• Possession of CISSP or similar recognized security certifications is advantageous.
• Advanced familiarity with security protocols, standards, and architectures.
• Proficient with security design principles and software security architectures.
• Technical programming skills and familiarity with cryptographic methods.
• Hands-on experience managing Windows and Linux environments with security responsibilities.
• Fundamental understanding of AI technologies including GenAI, LLMs, and automation related to business processes.
• Knowledgeable in encryption standards including symmetric/asymmetric encryption, digital certificates, SSL, VPN, IPSec, WAFs, and other security tools such as privileged identity management, file integrity monitoring, audit logging, and IDS/IPS systems.
• Experience scripting for automation and security purposes.

Corporate Security Responsibilities

• Comply strictly with Mastercard’s security policies and procedures.
• Maintain confidentiality and integrity of all accessed information.
• Promptly report any suspected security breaches.
• Complete all mandatory security training as per Mastercard requirements.