Senior Security Engineer

Senior Information Security Engineer

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mission First, People Always

As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day. By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.

Overview

The Enterprise Security Architecture and Innovation team is looking for a Senior Information Security Engineer to join our team to work closely with Network and Security Engineering, Cloud Security, and Enterprise Application teams to design, build and deliver technology solutions and drive alignment to Mastercard policies and standards. This person will evaluate system and application architectures, data flow requirements, and research areas of risk as it relates to software and infrastructure implementations. The role requires the ability to influence and collaborate across a diverse group of internal stakeholders, effectively managing multiple priorities, demands, and possess a deep understanding of networks and systems in both on-premises and cloud environments. In this role, the Senior Security Engineer will:

• Manage security assessment engagements that include the analysis of solution designs, data flow diagrams, software business cases, implementation plans, and network changes.
• Provide security engineering support for Mastercard's technology imperatives that include the build-out of new data centers.
• Identify opportunities for automating assessment workflows and assist with the development of scripts.
• Analyze new and existing technologies and provide recommendations for areas of security risk and alignment to Mastercard’s policies and technical standards.
• Collaborate with other corporate security teams to evaluate new technologies and defining security requirements.

All About You

The ideal candidate for this position should:

• Be a self-starter who is able to prioritize and work independently
• Have a passion to learn about new technologies, and progressively takes initiative to develop that expertise
• Be able to demonstrate technical competency in security engineering based on hands-on experience or relevant qualifications
• Have a solid understanding of firewalls, networking, threat prevention and detection, and application security principles
• Have hands-on experience evaluating data flows, firewall policies, and access control lists
• Be able to support maintenance windows outside of regular business hours (once or twice per month)
• Have hands-on experience developing scripts, working with structured data formats such as YAML and JSON, and code version control systems such as GIT or Bitbucket
• Have working knowledge and application of industry standards for security controls, and hardening systems and software
• Have effective communication and project management skills with the ability to manage multiple engagements with diverse technical teams

National Initiative for Cybersecurity Education (NICE) competency proficiency levels of limited in leadership, limited to developing in operational and professional, and developing to proficient in technical.

This Mastercard role shares KSAs with related NICE work roles

Corporate Security Responsibility

Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:

• Abide by Mastercard’s security policies and practices
• Ensure the confidentiality and integrity of the information being accessed
• Report any suspected information security violation or breach
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines

Required Skills: Basic Qualification: Additional Skills: Hybrid- 2 Days Onsite, Rest Remote (we have flex on the days they come in- have team meeting on Tuesdays so prefer them to be onsite those days) NO RELOCATION CANDIDATES!! Support Hours- when they run into issues where they can’t make changes during normal business hours, they will schedule a window on the weekend or outside of EST hours. This is a rare occurrence.

• Reviews Connectivity Requests, Policies and identify any potential red flags or policy violations

• This role requires someone to assist with those reviews

• We are looking for some automation experience so we can take these requests and integrate with API and help with some of the scripting to enable that automation

• We are currently building out

• Looking for fundamental networking and security experience

• It is a mid-level role so not deep analysis but enough to understand protocols and look at architecture diagrams and be able to help with automation, scripting, working with APIs, understanding various data formats like Json etc.