Job Description:

MasterCard is looking for a highly motivated teammate ready to play a key role as a Program Security Engineer.

Our Purpose :

• We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible.
• Using secure data and networks, partnerships, and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Overview :

• MasterCard is seeking a demonstrated security engineering expert to join our Business Security Enablement Guild within the Corporate Security team. The Business Security Enablement Guild is a powerful team of information security and DevSecOps experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do. Mastercard is researching and developing the next generation of products, services, and solutions at scale to enable consumers to securely, efficiently, and intelligently conduct transactions regardless of channel.
  
  The Role – Security Engineer for the Customer Data Management Program

• As the Security Engineer for the Customer Data Management Program, you will report to the Business Security Officer, you will be relied upon to serve as a technical security expert supporting the development and sustainability of secure products and practices. You will be the subject matter expert in application security delivering tactical mentorship and strategic consulting in terms of building a security-focused culture, secure development best-practices, and application security awareness as well as contextualizing the threat landscape and associated risks for the Customer Data Management Program.
• As a Security Engineer, You will be an active and critical participant in the design and implementation of the various program initiatives including the integration
• You will proactively work to find solutions that align with business needs while operating within Mastercard’s risk tolerance that is scalable and can be applied across multiple programs and platforms. This requires the ability to collaborate with cross-functional teams and regularly articulate and communicate to diverse audiences and properly translates security and risk management terminology into business terms and recommend alternative solutions to these stakeholders.
• As the Program Security Engineer, you will also assist the Business Security Enablement Guild in assessing the current threat landscape and business needs of the Customer Data Management Program to identify and prioritize and solution risks. This includes examining systems and applications to understand the current security posture and advocating for security best-practices to engineering teams.

All About You :

• Adaptive communication skills to influence cross functionally without direct authority, comfort speaking with customers and business partners at all levels
• Motivated self-starter with an agility and ability to manage ambiguity, deal with and anticipate change while still meeting business objectives
• Passion for great product design, security and usability
• Experience with application threat modeling or other risk identification techniques
• Current knowledge of security best practices, common exploits, and threat landscape
• Understanding of Agile methodologies
• Ability to build secure DevOps architecture patterns and provide guidance on how to develop secure applications and infrastructures
• Strong understanding of Information Security, Authentication and Data Privacy within the domain of Digital Commerce including relevant practical experience
• Demonstrated experience designing Secure multi-domain Internet facing applications
• Knowledge of the security architecture of web based network environments and secure communication between environments
• Knowledge and technical security experience in Cryptography, including several of the following: PKI, Digital Certificates, SSL, Hashing, Encryption techniques, etc
• Good understanding of Software Development especially related to secure coding best practices. Prior experience programming in Java is a plus.
• Experienced in mobile security architecture concepts, design, implementation along with Android and IOS is a plus