Lead AI Security Engineer, AI Identities-2
Mastercard
Lead AI Security Engineer, AI Identities-2
Job Description Summary
As an Information Security Engineer – AI Identity Security, you will be responsible for securing the identities associated with AI systems, including models, agents, services, pipelines, and non‑human actors that interact with data, infrastructure, and other systems. This role focuses on the discovery, lifecycle management, control enforcement, and monitoring of AI identities to ensure they are properly governed, least‑privileged, and continuously assessed for risk.
AI Identity Discovery & Inventory
• Design and operate mechanisms to discover and inventory AI identities, including:
o AI models, agents, and autonomous workflows
o Service accounts, non‑human identities, and API principals used by AI systems
o Identities created dynamically through AI pipelines, orchestration tools, and integrations • Maintain authoritative visibility into where AI identities exist, what they can access, and how they are used across environments.
• Integrate AI identity discovery into broader identity, asset, and AI Security Posture Management (AI‑SPM) capabilities. AI Identity Lifecycle Management
• Define and operationalize lifecycle controls for AI identities, including creation, modification, rotation, suspension, and decommissioning.
• Ensure AI identities are created with strong provenance, ownership, and accountability, including linkage to business and technical owners.
• Implement controls to prevent identity sprawl, orphaned AI identities, and unmanaged credentials. Access Control & Policy Enforcement
• Design and enforce least‑privilege access models for AI identities, aligned with the sensitivity of data, models, and actions performed.
• Partner with IAM and platform teams to implement policy‑based access controls, including role‑based, attribute‑based, and context‑aware authorization for AI systems.
• Ensure AI identities comply with enterprise security standards for authentication strength, credential handling, and key/token management. Monitoring, Detection & Risk Assessment
• Implement continuous monitoring of AI identity behavior, including access patterns, privilege use, and anomalous activity.
• Detect and investigate identity‑based risks and threats, such as excessive permissions, credential misuse, lateral movement, or abuse of AI agents.
• Leverage telemetry from identity platforms, cloud providers, and AI security tools to assess ongoing AI identity risk. AI Security Assessments & Control Validation • Conduct security assessments focused on AI identity usage, including architecture reviews, threat modeling, and control effectiveness testing.
• Validate that AI identity controls are correctly implemented and enforced across development, testing, and production environments.
• Partner with engineering teams to remediate identified gaps and track risk reduction over time. Governance, Standards & Compliance • Support development and operationalization of AI identity security standards, patterns, and control requirements, aligned with NIST, ISO, and emerging AI guidance.
• Track regulatory, legal, and industry expectations related to identity, access, and AI accountability.
• Provide evidence, reporting, and metrics to support audits, risk reviews, and governance forums. Documentation, Reporting & Metrics
• Develop and maintain standard operating procedures (SOPs), design patterns, and runbooks for AI identity security.
• Produce clear reports on AI identity posture, including coverage, risk, and remediation progress.
• Contribute to AI identity KPIs and KRIs, such as unmanaged identities, privilege levels, and anomalous activity trends. Advisory, Training & Enablement
• Act as a trusted advisor on AI identity security, providing guidance on secure patterns and operational best practices.
• Educate engineering and platform teams on AI identity risks, controls, and monitoring expectations.
• Support internal communities of practice focused on AI security, IAM modernization, and responsible AI adoption. Research, Experimentation & Continuous Improvement
• Stay current on emerging trends in AI agents, autonomous systems, and non‑human identity security.
• Design and execute proofs of concept (POCs) to evaluate new AI identity security tools, controls, and monitoring approaches.
• Continuously improve AI identity security through automation, integration, and control refinement. Qualifications • Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field.
• Strong experience in identity and access management, security engineering, or security operations, with exposure to AI or highly automated systems.
• Expertise in Least Agency frameworks, Zero Trust Architecture, Delegated Authority Management, Cryptographic Identities, and Short Lived Credentialing.
• Practical experience securing non‑human identities, service accounts, APIs, or machine‑to‑machine access.
• Understanding of AI/ML architectures and how identities are used across data pipelines, model execution, and agent‑based systems.
• Proven ability to design, assess, and operationalize identity controls at scale.
• Strong analytical and communication skills, with the ability to translate identity risk into actionable security outcomes.
• Relevant certifications such as CISSP, GIAC, CIAM/IAM‑related certifications, or cloud security certifications are desirable.
This role aligns to the NICE Cybersecurity Workforce Framework, with primary alignment to Identity and Access Management, Security Control Assessment, Cybersecurity Architecture, Systems Security Management, and Incident Response work roles. Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
- ...choices, making transactions secure, simple, smart and... ...potential. Title and Summary Lead Response Technology and Automation Security Engineer Overview The... ...operationalizing response automation, AI-augmented workflows, and... ...SOAR, SIEM, EDR, identity, ticketing, threat...SuggestedFull timeWorldwide
- ...and Australia. AI is the default operating... ...Opportunity The Security Operations (SecOps)... ...Security Engineer, SaaS & Integration... ...response for SaaS and identity-related events. You... ...documentation (SOC 2 reports, pen test... ...Incident Responder. Lead incidents through all...SuggestedRemote jobFull timeWork experience placementWork at officeRelocationHome officeFlexible hours
- ...payments choices, making transactions secure, simple, smart and accessible. Our... ...greatest potential. Title and Summary Lead Product Manager (AI)-2 About the Team Mastercard's... ...discovery alongside forward deployed engineers - conduct structured interviews with...SuggestedFull timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Software Engineer-2 Software Engineer II Role Summary... ...and reliability practices. • Leverage AI-assisted development tools such as GitHub...SuggestedFull timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible.... ...Summary Senior Data Scientist-2 Overview Product Data &... .... Technical Leadership • Lead the development of advanced... ...actionable insights. • Integrate AI/ML models to enhance the...SuggestedFull timeWorldwideFlexible hours
- ...payments choices, making transactions secure, simple, smart and accessible.... ...and Summary Data Scientist II-2 Job Description Summary... ...to apply and leverage AI at scale. The AI team is responsible... ...) and services (recommendation engine, anti-money laundering, fraud risk...Full timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...and Summary Senior Information Security Engineer Who is Mastercard? Mastercard is a... ...experience. • Good understanding of identity management, user authentication and authorisation...Full timeWorldwide
- ...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships... ...their greatest potential. Title and Summary Senior Data Engineer-2 Who is Mastercard? Mastercard is a global technology...Full timeWork experience placementWorldwide
$3,200 per month
...Software Engineer Hybrid Bangalore or Pune, India... ...be able to write secure, efficient,... ...on experience with AI-assisted coding tools... ...fervor for industry-leading next-generation technology... ..., gender identity, gender expression,... ...job application. 2. How We Use Personal...Hourly payPermanent employmentFull timeLocal areaRemote work- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...greatest potential. Title and Summary AI Engineer Mastercard’s Business & Market Insights... ...complex data into actionable strategies that lead to better outcomes and sustained...Full timeWork experience placementWorldwide
- ...About Ping Identity: At Ping Identity, we believe in... ...digital experiences both secure and seamless for all users... ...a Principal Software Engineer to lead the evolution of our... ...maintainable code. AI Adoption : Lead the technical... ...IAM), including OAuth 2.0 , OpenID Connect ,...Full timeLocal areaWorldwideFlexible hours
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...greatest potential. Title and Summary Senior AI Data Engineer Overview As a Senior AI Data... ...'s AI Center of Excellence, you will lead the design, development, and optimization...Full timeWorldwide
- ...wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation... ...governments realize their greatest potential. Title and Summary Lead AI Ops Engineer AI Ops Overview: Mastercard's Operational...Full timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Principal AI Engineer AI Solutions, part of Mastercard’s AI... ...As a Principal AI Engineer, you will: Lead the architecture, design, and implementation...Full timeWorldwide
- ...one of the world’s leading EV charging networks... ...To Staff, Security Operations What... ...mature our detection engineering capabilities. You will... ...uploads, email, and AI tools. Lead weekly... ...role, with at least 2 years in a lead or... ...sex, gender, gender identity, gender expression,...Full timeRemote work
- ...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships... ...greatest potential. Title and Summary Information Security Engineer II Overview Who is Mastercard? Mastercard is a global...Full timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible.... .... Title and Summary Software Engineer II – Integrations & API... ...• Plus: Java / Spring Boot, AI-assisted tools (e.g., GitHub Copilot... ...What You Bring - Required • 2-4 years of professional software...Full timeWorldwide
- ...several others. Team: Product Engineering (Frontend) Duration: 1 year... ...(3 days/week in office, 2 days work-from-home) Post-internship... ...work Exposure to relevant AI tools (e.g., GitHub Copilot,... ...contributions. We offer industry-leading compensation, along with...Full timeInternshipWork at officeWork from homeFlexible hours3 days per week
- ...choices, making transactions secure, simple, smart and... ...Senior Software Engineer Overview Be part... ...and validate cardholder identity. Our patented Java-based... ...like to develop industry leading solutions for fighting... ...Experience with Angular 2 or modern SPA frameworks...Full timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible.... .... Title and Summary Software Engineer II We empower our customers'... .... • Leverage modern AI-assisted development tools to improve... ...discipline. • Minimum 2 years of professional software...Full timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible.... ...and Summary Senior Software Engineer All About Us MasterCard... .... • API security: OAuth 2.0, OpenID Connect, JWT, mTLS,... ...validation, and implementation. • AI-assisted engineering: GitHub...Full timeContract workWorldwide
- ...choices, making transactions secure, simple, smart and... ...President, Software Engineering Consumer Data Management... ...that manages consumer identity, consent, and... ...advances toward a modern, AI- and data-centric architecture... ..., Engineering to lead the technology strategy...Full timeWorldwide
- ...Oracle EBS 12.2 Techno-Functional Developer – Procurement Role Summary Looking for an Oracle EBS 12.2 specialist with strong Procurement/P2P knowledge who can bridge functional requirements and technical delivery. Key Responsibilities Support and enhance Oracle...
- ...choices, making transactions secure, simple, smart and... ...potential. Title and Summary Lead Software Engineer Job Description Template... ...systems • Experience using AI tools and ability to explore... ...without regard to gender, gender identity, sexual orientation, race, ethnicity...Full timeTemporary workWorldwide
- ...About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise... ...generation of enterprise AI governance capabilities to enable... ...You will work closely with engineering, product, security, and...Full timeLocal areaWorldwideFlexible hours
- ...wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and... ...governments realize their greatest potential. Title and Summary Lead AI platform Engineer (DevOps) Who is Mastercard? Mastercard powers economies...Full timeWorldwide
- ...About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise... ...hands-on Principal Software Engineer to build PingOne Privilege, our... ...privileged access platform, and the AI security capabilities that...Full timeLocal areaWorldwideFlexible hours
- ...technical hands on leadership and mentor engineers in an innovative and fast paced environment... ...you’ll bring) Engineering degree with 2-4 years of experience in application... ...religion, sex, sexual orientation, gender identity, national origin, disability, or protected...Local area
- ...choices, making transactions secure, simple, smart and... ...potential. Title and Summary Lead Software Engineer Job Description Summary... ...development lifecycle for Mastercard Identity Solution program. As a... ...• Must have knowledge of AI Agents and hands on using AI...Full timeContract workWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...potential. Title and Summary Lead Data Engineer (Data Platforms) Role Summary We are... ...RBAC, service principals, and enterprise identity integration. Support data platform...Full timeWorldwide
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead AI Security Engineer, AI Identities-2. Be the first to apply!
