Lead Guild Security Engineer

About Mastercard

Mastercard is a global technology leader in the payments field, operating in over 200 countries. Its mission is to foster an inclusive digital economy that benefits everyone by making financial transactions safe, straightforward, intelligent, and accessible. Through secure data, networks, strong partnerships, and continuous innovation, Mastercard supports individuals, financial institutions, governments, and businesses to unlock their full potential.

Guided by its "decency quotient" (DQ), the company cultivates a culture built on integrity and connection across more than 210 countries and territories, aiming to build a sustainable future with limitless opportunities for all.

Corporate Security Mission

Within Mastercard, the Corporate Security team is charged with defending the company against cyber and physical threats. This is achieved by empowering staff with tools, support, and career development opportunities to ensure mission success and personal wellbeing.

Role Overview

The Business Security Enablement (BSE) guild seeks a Lead Security Engineer to guide and mentor security efforts worldwide. This team consists of information security specialists dedicated to embedding security at the core of Mastercard's products and services. The role demands deep expertise in secure engineering and information security, focusing on advising product and operational teams to design secure applications adhering to best industry practices. As a senior engineer (L6), the incumbent will lead on complex, global, and cross-functional projects.

Key Responsibilities

• Represent and advocate for the Business Security Enablement Guild, advising program security engineers and initiatives on security review processes to ensure compliance with policies and standards.
• Contribute to and maintain documentation related to security standards and procedures.
• Develop and deliver technical and business-oriented presentations.
• Apply thorough knowledge of security concepts and principles to evaluate and respond to business requirements.
• Take the lead security role in extensive and complex company-wide programs spanning multiple geographies.
• Advise on and propose security and compliance solutions for designing new or enhanced systems.

Candidate Profile

• 7 to 10 years' experience in the field of information security.
• Possession of CISSP or another recognized industry security certification preferred.
• Strong expertise in security protocols and standards, including security architecture and frameworks for protecting web-based applications and online transactions.
• Experience or technical proficiency in cryptographic techniques.
• Understanding of symmetric/asymmetric encryption methods, digital certificates, SSL, VPNs, IPSec, DMZ construction, and security mechanisms such as privileged identity management, file integrity monitoring, logging, and intrusion detection/prevention.
• Experience in automation and process optimization.
• Proficiency with programming languages and intermediate to advanced scripting skills.
• Moderate to advanced experience administering and securing Linux operating systems.

Corporate Security Responsibilities

• Adhere strictly to Mastercard's security policies and procedures.
• Ensure the confidentiality and integrity of accessed information.
• Report any suspected security violations or breaches promptly.
• Complete mandatory periodic security training as prescribed by company guidelines.

Additional References

This role maps to NICE Cybersecurity Framework roles such as Secure Software Assessor and Security Architect.