Lead Response Technology and Automation Security Engineer
Full-time
Mastercard
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary
Response product team members work closely with regional SOC teams to execute the RESPOND product strategy on the ground. This role is the connective tissue between product vision and operational reality: building, tuning, and operationalizing response automation, AI-augmented workflows, and analyst tooling that SOC and DFIR teams rely on every day. The RESPOND product team is hands-on with SOAR development, agentic AI integration, notebook-based investigation tooling, and continuous improvement of analyst workflows. Core Responsibilities
• Execute the RESPOND product roadmap in close partnership with SOC and Incident Response teams in the region.
• Design, build, test, and maintain SOAR playbooks used for incident triage and response scopes to collect and process digital evidence and artifacts at speed and scale.
• Build and operationalize AI-augmented response capabilities, including:
o Agentic AI workflows integrated into triage, enrichment, and response.
o Prompt books and prompt libraries tuned for SOC and Incident Response use cases.
o Prompt-book/code notebook (Jupyter, etc) development for repeatable investigation, hunt, and DFIR workflows.
o LLM-driven enrichment and summarization integrated into case management.
• Define strategic requirements and oversee management for connectors, apps, and integrations between SOAR, SIEM, EDR, identity, ticketing, threat intelligence, and AI/LLM platforms (including MCP servers where applicable) for build through our dedicated engineering partners.
• Build and maintain response tooling: scripts, live-response packages, enrichment services, and automation utilities deployable via EDR and SOAR.
• Embed with SOC and DFIR analysts to identify high-toil workflows and convert them into automated, AI-assisted, or fully autonomous playbooks with appropriate guardrails.
• Tune and optimize playbooks and AI-assisted workflows against measurable outcomes (MTTR, false-positive rate, analyst touch time, AI-assist accuracy).
• Contribute to the centralized response tooling, prompt book, and notebook libraries, ensuring code quality, documentation, version control, and reusability across regions.
• Support major incident response activities by deploying and operating response tooling and AI-assisted investigation workflows under pressure.
• Provide feedback into the product backlog and partner with the PO on requirements refinement.
• Document playbooks, prompt books, notebooks, and technical designs to enterprise standards. All About you
• 5+ years in security operations, incident response, detection engineering, or security automation engineering
• Prior experience as a SOC analyst, Security Engineer, Digital Forensics Examiner, SOAR engineer, and/or threat hunter preferred.
• Hands-on SOAR development experience with low-code/no-code or hyper-automation tools and concepts. Must be able to define and build reliable, scalable response capabilities.
• Demonstrated enterprise experience executing on AI-augmented SOC concepts, including at least two of:
o Building and maintaining AI prompt books for analyst workflows.
o Developing Jupyter notebooks for investigation, hunt, or DFIR.
o Integrating LLMs or agentic AI into XDR, SOAR, case management, or response tooling.
o Leveraging IDEs with AI connectors to process data and execute AI workflows
o Deploying agent-based AI workflows for triage or enrichment in production.
• Strong scripting skills in Python and PowerShell. Comfortable with basic code repo management using Git or equivalent.
• Working knowledge of REST APIs, JSON, webhooks, and authentication patterns (OAuth, API keys, managed identities).
• Solid grounding in incident response fundamentals and the IR lifecycle.
• Hands-on experience with: EDR platforms (CrowdStrike, SentinelOne, Defender for Endpoint), SIEM (Splunk ES, Microsoft Sentinel), identity platforms (Entra ID, Okta), cloud platforms (AWS, Azure, GCP), and cloud protection products (CNAPP, CWPP, CSPM).
• Familiarity with MITRE ATT&CK and the ability to map response actions to adversary techniques.
• Demonstrated ability to operate inside an agile delivery model with a product backlog.
Preferred Qualifications
• Bachelor’s degree in computer science, cybersecurity, or IT-focused disciplines (or equivalent experience).
• At least two Industry certifications: GCFA, GCIH, GNFA, GCFR, GREM, or equivalent.
• Experience with SecOps focused MCP server architectures, agentic frameworks, or tools
• Experience building EDR live-response scripts and tool libraries.
• Exposure to detection-as-code and response-as-code practices, including CI/CD for security content.
• Background in regulated financial services or Fortune 500 SOC environments. Corporate Security Responsibility
Lead Response Technology and Automation Security Engineer
Overview
The Corporate Security Threat and Response Management product ownership team is looking for a Lead Level Security Engineer to help drive our Security Operations modernization strategy. The ideal candidate is passionate about the modern security tools, capabilities, and strategies. The RESPOND product team executes on the multi-year strategy and roadmap set by the RESPOND product owner to evolve and modernize SecOps incident investigation and response technology, capabilities, tools, and process.Response product team members work closely with regional SOC teams to execute the RESPOND product strategy on the ground. This role is the connective tissue between product vision and operational reality: building, tuning, and operationalizing response automation, AI-augmented workflows, and analyst tooling that SOC and DFIR teams rely on every day. The RESPOND product team is hands-on with SOAR development, agentic AI integration, notebook-based investigation tooling, and continuous improvement of analyst workflows. Core Responsibilities
• Execute the RESPOND product roadmap in close partnership with SOC and Incident Response teams in the region.
• Design, build, test, and maintain SOAR playbooks used for incident triage and response scopes to collect and process digital evidence and artifacts at speed and scale.
• Build and operationalize AI-augmented response capabilities, including:
o Agentic AI workflows integrated into triage, enrichment, and response.
o Prompt books and prompt libraries tuned for SOC and Incident Response use cases.
o Prompt-book/code notebook (Jupyter, etc) development for repeatable investigation, hunt, and DFIR workflows.
o LLM-driven enrichment and summarization integrated into case management.
• Define strategic requirements and oversee management for connectors, apps, and integrations between SOAR, SIEM, EDR, identity, ticketing, threat intelligence, and AI/LLM platforms (including MCP servers where applicable) for build through our dedicated engineering partners.
• Build and maintain response tooling: scripts, live-response packages, enrichment services, and automation utilities deployable via EDR and SOAR.
• Embed with SOC and DFIR analysts to identify high-toil workflows and convert them into automated, AI-assisted, or fully autonomous playbooks with appropriate guardrails.
• Tune and optimize playbooks and AI-assisted workflows against measurable outcomes (MTTR, false-positive rate, analyst touch time, AI-assist accuracy).
• Contribute to the centralized response tooling, prompt book, and notebook libraries, ensuring code quality, documentation, version control, and reusability across regions.
• Support major incident response activities by deploying and operating response tooling and AI-assisted investigation workflows under pressure.
• Provide feedback into the product backlog and partner with the PO on requirements refinement.
• Document playbooks, prompt books, notebooks, and technical designs to enterprise standards. All About you
• 5+ years in security operations, incident response, detection engineering, or security automation engineering
• Prior experience as a SOC analyst, Security Engineer, Digital Forensics Examiner, SOAR engineer, and/or threat hunter preferred.
• Hands-on SOAR development experience with low-code/no-code or hyper-automation tools and concepts. Must be able to define and build reliable, scalable response capabilities.
• Demonstrated enterprise experience executing on AI-augmented SOC concepts, including at least two of:
o Building and maintaining AI prompt books for analyst workflows.
o Developing Jupyter notebooks for investigation, hunt, or DFIR.
o Integrating LLMs or agentic AI into XDR, SOAR, case management, or response tooling.
o Leveraging IDEs with AI connectors to process data and execute AI workflows
o Deploying agent-based AI workflows for triage or enrichment in production.
• Strong scripting skills in Python and PowerShell. Comfortable with basic code repo management using Git or equivalent.
• Working knowledge of REST APIs, JSON, webhooks, and authentication patterns (OAuth, API keys, managed identities).
• Solid grounding in incident response fundamentals and the IR lifecycle.
• Hands-on experience with: EDR platforms (CrowdStrike, SentinelOne, Defender for Endpoint), SIEM (Splunk ES, Microsoft Sentinel), identity platforms (Entra ID, Okta), cloud platforms (AWS, Azure, GCP), and cloud protection products (CNAPP, CWPP, CSPM).
• Familiarity with MITRE ATT&CK and the ability to map response actions to adversary techniques.
• Demonstrated ability to operate inside an agile delivery model with a product backlog.
Preferred Qualifications
• Bachelor’s degree in computer science, cybersecurity, or IT-focused disciplines (or equivalent experience).
• At least two Industry certifications: GCFA, GCIH, GNFA, GCFR, GREM, or equivalent.
• Experience with SecOps focused MCP server architectures, agentic frameworks, or tools
• Experience building EDR live-response scripts and tool libraries.
• Exposure to detection-as-code and response-as-code practices, including CI/CD for security content.
• Background in regulated financial services or Fortune 500 SOC environments. Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Lead Response Technology and Automation Security Engineer in India vacancy
- ...About the role Sr Associate Test Engineer - Test Automation & Tools Development. We are seeking a highly... ...supports functional, performance, and security testing across diverse platforms and environments. Key Responsibilities: Tool Development & Framework Design...SuggestedFull time
Moniepoint
Indiaa month ago - ...in enterprise mobile security, being the first and... ...machine learning-based engine protects against... ...we are seeking a QA Automation Engineer with 1-3 years... ...software releases. Key Responsibilities Contribute to the... ...Science, Information Technology, or related field....SuggestedFull time
Zimperium
India17 days ago - ...conversational discovery, and automation of media workflows through... ...looking for a QA Automation Engineer (5–8 years experience) who... ...validation when needed. Key Responsibilities Design and own the end-to... .... Growth opportunities: Lead backend strategy while...SuggestedFull timeRemote workFlexible hoursShift work
Crop
Indiaa month ago - ...combining modern IT administration with automation engineering and AI-powered tooling . From the... ...business running efficiently and securely. You will also own day-to-day IT... ..., not the other way around. Core Responsibilities Design, build, and own AI-powered...SuggestedFull timeContract workRemote work
Fresh Prints
Indiaa month ago - ...combining modern IT administration with automation engineering and AI-powered tooling . From the... ...business running efficiently and securely. You will also own day-to-day IT compliance... ...hat, not the other way around. Core Responsibilities Design, build, and own AI-powered...SuggestedFull timeRemote work
Fresh Prints
Indiaa month ago - ...transforming how we interact with technology. We launched in January 2... ...developers access to our leading AI audio foundational models... ...lives. We are researchers, engineers, and operators. IOI... ...beyond your immediate role and responsibilities. Learning & development...Full timeImmediate start
Valor Capital Group
India10 days ago - ...payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and... ...potential. Title and Summary Lead Business Analyst Overview... .... Corporate Security Responsibility All activities involving access...Full timeWork experience placementWorldwide
Mastercard
India10 days ago - ...looking for a Senior Security Engineer to own and drive... ...Security, Detection & Response, GRC, and Legal teams... ...enforcement Build security automation and internal tooling.... ...workflows Lead security reviews of new... ...and isolation technologies ( Island, Talon/Palo...Full timeRemote work
Atlan
Indiaa month ago - ...choices, making transactions secure, simple, smart and accessible. Our technology and innovation,... ...potential. Title and Summary Lead Technical Program... ...Program/Release Train Engineer (RTE). • This coordinator... .... • This role is responsible for communication and coordination...Full timeWorldwide
Mastercard
India2 days ago - ...choices, making transactions secure, simple, smart and accessible. Our technology and innovation,... ...potential. Title and Summary Lead Technical Program... ...strategically important global engineering organization? Role... .... Corporate Security Responsibility All activities...Full timeWorldwide
Mastercard
India10 days ago - ...transforming how we interact with technology. We launched in January 2... ...developers access to our leading AI audio foundational models... ...lives. We are researchers, engineers, and operators. IOI... ...beyond your immediate role and responsibilities. Learning & development...Full timeImmediate startRemote work
Valor Capital Group
India2 days ago - ...platform adds a conversational AI layer for extracting intelligence from media, enabling powerful search, conversational discovery, and automation of media workflows through AskAI. We're now pushing further into AI — building the next generation of intelligent, automation-...Full time
Crop
Indiaa month ago - ...We are hiring .NET Software Engineers (Junior to Senior) to build... ...Interest in energy systems, demand response, or climate tech About Us... ...means helping build technology that strengthens reliability,... ...has allowed our alliance to lead the way in transforming various...Full timeLocal area
Accurant
India7 days ago - ...the Opportunity The Security Operations (SecOps)... ...environment. Our key responsibilities include incident... ...Information Security Engineer, SaaS & Integration Security... ..., APIs, and automation workflows. In this role... ...Incident Responder. Lead incidents through all...Full timeWork experience placementWork at officeRemote workRelocationHome officeFlexible hours
Moonpay
India10 days ago - ...an experienced Organic Growth Lead to drive user acquisition... ...store optimization and Answer Engine Optimization (AEO). The ideal... ...Optimize content for AI-generated responses, featured snippets, knowledge... ...SaaS, crypto, or high-growth technology companies. Demonstrated...Full time
Delta Exchange
Indiaa month ago - ...As Growth Lead for the Cybersecurity portfolio , your primary objective will be... ...B2C Growth & Customer Acquisition Responsibilities: Develop and execute growth initiatives... ...communities, practitioners, enterprise security teams, forums, conferences, and...Full timeRemote workFlexible hours
Packtpub
Indiaa month ago - ...Requirements Key Responsibilities Threat & Vulnerability Management Process scan registration requests for vulnerability scanning coverage... ...Required Qualifications ~7+ years of experience in security operations, including substantial hands-on administration of...Full timeRemote workShift work
Weekday
India9 days ago - ...are seeking a highly skilled Lead Consultant – FinOps &... ...their cloud investments. Key Responsibilities Lead end-to-end Cloudability... ...customers, collaborating with engineering, finance, procurement, and... ...recommendations to business and technology leadership. Support pre-...Full time
Cprime
India11 days ago - ..., locally-sourced market in the Philippines. We are backed by leading global and domestic investors including Y Combinator, Sony, Global... ...Role Overview : The Lead Management Associate is responsible for sourcing, managing, and nurturing leads for astrologer onboarding...Full timeLocal area
Lokal
Indiaa month ago - ...Role Purpose The Credit Lead will be responsible for driving prudent credit underwriting, portfolio quality, and TAT management for LAP proposals... ...in Loan Against Property (LAP), Mortgage Lending, and Secured Lending. ~ Proven track record in evaluating and approving...Full time
DBS Bank Ltd
India2 days ago - ...Summary Our Wireless Technology team is pioneering the future... ...world. Job Duties and Responsibilities Candidates must be willing... ...driven diagnostic tools to automate the identification of... ...Communication, or Electrical Engineering. Minimum Experience: 5...Local areaFlexible hoursNight shift
Dish
India3 days ago - What will you do? 🤔 We are looking for a Senior Security Engineer to own and drive Corporate Security at Atlan. This is a senior individual contributor role with high autonomy and high visibility. You will be the technical authority for everything that protects our people...Full time
Atlan
Indiaa month ago - As Growth Lead for the Cybersecurity portfolio , your primary objective will be driving customer growth and revenue across our cybersecurity... ...partners, and industry experts. What You’ll Do: B2C Growth & Customer Acquisition Responsibilities: Develop and execute growth initiatives...Full time
Packtpub
Indiaa month ago - ...you do? You'll own AppSec and Cloud Security automation across a platform used by 450+ enterprise... ...is required. Application Security: Lead threat modeling, security reviews, and... ..., APIs, and services. Work with engineering to eliminate vulnerability classes end...Full timeShift work
Atlan
Indiaa month ago - The Role The Lead Management Associate is responsible for sourcing, managing, and nurturing leads for astrologer onboarding. This role requires a proactive approach in identifying potential candidates through social media, online portals, and inbound inquiries while ensuring...Full time
Lokal
Indiaa month ago - ...ROLE OVERVIEW The Lead Clinical Data Manager will provide strategic and operational leadership for clinical data management activities... ...individual will serve as the sponsor subject matter expert responsible for overseeing external vendors, ensuring data quality and...Full timeInterim role
Fresh Prints
Indiaa month ago - ROLE OVERVIEW The Lead Clinical Data Manager will provide strategic and operational leadership for clinical data management activities... ...individual will serve as the sponsor subject matter expert responsible for overseeing external vendors, ensuring data quality and integrity...Full time
Fresh Prints
Indiaa month ago - ...requirements. Key Accountabilities • Lead and manage the CE Reporting team responsible for CE dashboards and MIS. •... ...regulatory reporting. • Drive automation and reporting efficiency... ...Partner with business, operations, technology and compliance teams. • Monitor...Full timeWork at office
DBS Bank Ltd
India10 days ago - ...enterprise-grade scalability, security, and performance... ..., optimizing complex automated workflows, large data... ...vulnerability mitigations. Lead Quote-to-Cash &... ...for the Salesforce engineering team, unblocking complex... ...Science, Information Technology, Software Engineering,...Full timeContract work
Weave
India16 days ago - ...As a Lead Risk Advisor Assistant , you will serve as a senior support partner to one or more Risk Advisors, playing a key role in overseeing daily insurance operations, ensuring high-quality client servicing, and maintaining operational excellence across accounts....Contract work
Fresh Prints
Indiaa month ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead Response Technology and Automation Security Engineer. Be the first to apply!
Related searches