Senior Security Engineer

Title: Senior Security Engineer
Location : Arlington, VA
Duration: 12 months

Enterprise Security Architecture and Innovation works to ensure that enterprise-wide technologies are secure, by design, to protect and enable the business. This team provides advisory services & standardized security architecture frameworks. Additionally, the team modernizes the organization's security posture through the introduction of innovative security solutions while enhancing existing security technologies to mitigate rapidly emerging threats.

Required skills:
Security engineering (hands on experience working with firewalls, IAM solutions, log management, scanning)
Python scripting, TCP/IP - solid understanding of IP addressing, ports and protocols

Nice to have: Experience working with YAML
Java programming

Job Description:
As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.
By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.


Overview


The Enterprise Security Architecture and Innovation team is looking for a Senior Information Security Engineer to join our team to work closely with Network and Security Engineering, Cloud Security, and Enterprise Application teams to design, build and deliver technology solutions and drive alignment to Mastercard policies and standards. This person will evaluate system and application architectures, data flow requirements, and research areas of risk as it relates to software and infrastructure implementations. The role requires the ability to influence and collaborate across a diverse group of internal stakeholders, effectively managing multiple priorities, demands, and possess a deep understanding of networks and systems in both on-premises and cloud environments.


In this role, the Senior Security Engineer will:


Manage security assessment engagements that include the analysis of solution designs, data flow diagrams, software business cases, implementation plans, and network changes.
Provide security engineering support for Mastercard's technology imperatives that include the build-out of new data centers.
Identify opportunities for automating assessment workflows and assist with the development of scripts.
Analyze new and existing technologies and provide recommendations for areas of security risk and alignment to Mastercard's policies and technical standards.
Collaborate with other corporate security teams to evaluate new technologies and defining security requirements.

All About You


The ideal candidate for this position should:
Be a self-starter who is able to prioritize and work independently
Have a passion to learn about new technologies, and progressively takes initiative to develop that expertise
Be able to demonstrate technical competency in security engineering based on hands-on experience or relevant qualifications
Have a solid understanding of firewalls, networking, threat prevention and detection, and application security principles
Have hands-on experience evaluating data flows, firewall policies, and access control lists
Be able to support maintenance windows outside of regular business hours (once or twice per month)
Have hands-on experience developing scripts, working with structured data formats such as YAML and JSON, and code version control systems such as GIT or Bitbucket
Have working knowledge and application of industry standards for security controls, and hardening systems and software
Have effective communication and project management skills with the ability to manage multiple engagements with diverse technical teams


National Initiative for Cybersecurity Education (NICE) competency proficiency levels of limited in leadership, limited to developing in operational and professional, and developing to proficient in technical.
This Mastercard role shares KSAs with related NICE work roles

Corporate Security Responsibility


Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
Abide by security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with guidelines.