Description
Mastercard is seeking a Senior Information Security Engineer to join its Business Security Enablement Guild. The ideal candidate is passionate about cybersecurity, with broad knowledge and experience in various security domains and a creative mindset.
In this role, you will engage with customers to achieve their business requirements securely, perform Third Party Software Security Evaluations, use Artificial Intelligence to solve business problems, apply security principles to technology reviews, and consult with development and operational teams to design secure applications and services.
Responsibilities:
- Engage with customers and help them achieve their business requirements securely by performing Third Party Software Security Evaluations.
- Use Artificial Intelligence to solve relevant business problems that bring efficiency.
- Apply knowledge of security principles, theories and concepts to technology reviews.
- Understand existing business processes and identify opportunities to make them more efficient.
- Consult with development and operational teams to securely design applications and services following industry best practices.
- Work independently on the review of larger, more complex initiatives with strategic importance.
- Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems.
- Prepare and present business/technical presentations.
Requirements:
- Knowledge of information security, risk management, and data privacy within the domain of digital commerce, including relevant practical experience.
- Good understanding of identity management, user authentication and authorisation principles.
- Demonstrate a broad awareness of security engineering concepts and practices across all phases of the software development lifecycle.
- Demonstrated experience designing secure multi-domain Internet-facing applications.
- Experience providing security architecture advice for web-based network environments and secure communication between environments.
- Demonstrate the ability to articulate and communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms.
- Moderate hands-on experience in scripting or Vibe coding.
- Basic knowledge and experience in cryptography, including several of the following: encryption, hashing, key management, digital certificates, and TLS.
- Technical experience with Java or a similar enterprise programming language, especially related to secure coding best practices, is a plus.
- Experience in mobile security architecture concepts, design, and implementation, along with Android and iOS, is a plus.
- Working knowledge and technical security experience with Linux is a plus.
Corporate Security Responsibility:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.