This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Business Security Enablement (BSE) team is looking for a Lead Security Engineer to join our team. The Business Security Enablement guild is a worldwide team of information security experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do. The ideal candidate needs a high level of expertise in information security and secure engineering disciplines to advise product and operational teams on how to securely design applications and services following industry best practices. You will apply deep knowledge of security principles, theories, and concepts throughout the business and development lifecycles. As an L6 Security Engineer, you are expected to take a lead security role in large, complex, global, cross-functional initiatives.
Job Responsibility
Advocate on behalf of the BSEG Guild, providing directions to program security engineers and market facing programs on the current security review processes and procedures ensuring established security policies and standards are observed on projects
Document enhancements to security standards and procedures
Prepare and present business/technical presentations
Apply knowledge of security principles, theories and concepts to business requests
Take a Lead Security Position in larger, more complex initiatives (e.g., global initiatives, cross functional/cross geographies)
Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems
Requirements
7-10 years of experience in information security disciplines
Advanced knowledge of security protocols and standards, experience with security frameworks, architecture and secure designs, especially for the implementation of web-based applications to secure on-line transactions
Knowledge or technical security experience in Cryptography
Working knowledge of symmetric and asymmetric encryption, Digital Certificates, SSL, VPN, IPSec, development of DMZ's and other security tools and processes such as privileged identity management, file integrity, audit, logging and IDS/IPS
Experience with automation and process improvement
Technical experience with Programming Languages
Intermediate to advanced hands-on scripting experience
Moderate to extensive hands-on administrative and security experience with Linux systems
Nice to have
CISSP or Industry recognized security certification desired