Senior Information Security Engineer

Who you are

• The ideal candidate needs an elevated level of expertise in information security and secure engineering disciplines
• 5-7 years of work experience in information security disciplines
• CISSP or an industry-recognised security certification is a nice-to-have
• Advanced knowledge of security protocols and standards
• Experience with software, security architecture and security designs
• Technical experience with Programming Languages
• Knowledge or technical security experience in Cryptography
• Moderate hands-on administrative and security experience with Windows and Linux systems
• Basic knowledge related to AI, GenAI, LLMs and business automation with AI
• Working knowledge of symmetric and asymmetric encryption, Digital Certificates, SSL, VPN, IPSec, WAFs and other security tools and processes such as privileged identity management, file integrity, audit, logging and IDS/IPS
• Moderate hands-on scripting experience

What the job involves

• The Business Security Enablement is looking for a Senior Security Engineer to join our team. The Business Security Enablement Guild is a worldwide team of information security experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do
• Apply knowledge of security principles, theories, and concepts to technology reviews and bring GenAI-based automation
• Work independently on reviews of third-party technologies and internally developed applications
• Work closely with stakeholders to evaluate business requests to determine feasibility
• Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems
• Ensure established security policies and standards are observed on projects
• Prepare and present business/technical presentations
• Provide design and architecture advice to internal teams on how to securely develop and build applications and supporting systems
• Define secure mechanisms for critical business functions in cloud environments
• Work closely with developers and evaluate business requests and proposed designs to determine feasibility; work with software development teams to define alternatives and recommend optimal solutions to meet security and regulatory requirements in the design of new enhanced systems
• Leverage security experience and knowledge within the mobile and digital commerce arena to cultivate and maintain effective working relationships with a variety of internal MasterCard stakeholders, including business owners, end-users, customers, project managers, engineers, and senior management
• Define security requirements and guidelines to ensure repeatable processes are followed by worldwide teams
• Assist in the strategy, standards, and architecture for the security aspects of the SDLC, including application, mobile, web service, DevOps, cloud, GenAI, LLM models, and CI/CD efforts