Security Engineering & Operations Team Lead

Mastercard Dynamic Yield is seeking an experienced Security Engineering & Operations Team Lead to lead the implementation and operation of security capabilities across products, cloud platforms, software supply chain, and AI-enabled systems.

This role combines existing DevSecOps responsibilities with broader security engineering, cloud and application security, AI security, and security operations. You’ll lead a team responsible for embedding security into the engineering lifecycle, automating preventive and detective controls, strengthening security posture, and supporting technical incident response.

Responsibilities:

• Lead a team of security engineers responsible for DevSecOps, security engineering, and security operations across production and engineering environments.
• Design, implement, and operate security controls across AWS, Kubernetes, applications, CI/CD pipelines, software dependencies, and AI-enabled systems.
• Drive application and software supply chain security, including vulnerability management, security scanning, secrets protection, and artifact integrity.
• Strengthen cloud security, identity and access management, data protection, network security, and runtime protection capabilities.
• Develop and operationalize AI security guardrails, monitoring, and secure integration patterns in partnership with Corporate Security.
• Lead or support security incident response, threat detection, investigation, containment, and recovery.
• Partner with Corporate Security, Product Security, and engineering teams on security architecture, threat modeling, risk remediation, and technical security assessments.
• Automate security controls and continuously improve security capabilities, operational effectiveness, and compliance evidence.
• Mentor and coach team members, fostering technical excellence, ownership, and professional growth.

Requirements:

• At least 4 years of experience in a DevOps, DevSecOps, security engineering, or security operations leadership role, with a strong focus on production systems.
• A degree in Computer Science or a related discipline, relevant military experience, or an equivalent technical background.
• Proven experience securing and operating production environments on AWS, including cloud-native infrastructure and Kubernetes.
• Strong understanding of application security, secure SDLC practices, software supply chain security, and vulnerability management.
• Proficiency in one or more programming languages, such as Go, JavaScript, TypeScript, or Python, with experience automating security capabilities.
• Experience with CI/CD platforms such as GitHub Actions, infrastructure as code such as Terraform or CloudFormation, and security tooling integration.
• Familiarity with security monitoring, detection and response, incident management, and observability tools such as Prometheus and Grafana.
• Understanding of identity and access management, encryption, secrets management, network security, and cloud security controls.
• Ability to collaborate effectively with Corporate Security, Product Security, Engineering, DevOps, and other cross-functional teams.
• Demonstrated leadership, project ownership, prioritization, and the ability to translate security requirements into practical, scalable engineering solutions.