Lead Information Security Engineer

Mastercard•Arlington, VA

2d•Onsite

About The Position

The Lead Security Architect candidate will have a high degree of responsibility and will work closely with Network and Security Engineering, Cloud Security, and Enterprise Application teams to design, build and deliver technology solutions and drive alignment to Mastercard policies and standards. This person will research areas of risk and influence changes to policies and technical standards as well as technology requirements for future security services. The role requires the ability to influence and collaborate across a diverse group of internal stakeholders, effectively managing multiple priorities, demands, and possess a deep understanding of networks and systems in both on-premises and cloud environments.

Requirements

Experience performing security risk assessments and system configuration audits in an enterprise environment to identify weaknesses and policy non-compliance.
Experience in developing formal risk assessment reports and communicating the assessment and recommendations results to senior leadership.
Working knowledge and application of NIST Security Publications, PCI-DSS, CIS Benchmarks, and other industry standards for security networks, hardening systems and software.
Working experience with firewalls and access control lists to analyze network connectivity requirements and provide recommendations for enforcing communications based on the principles of least privilege.

Nice To Haves

Experience developing scripts and workflows to automate repeatable processes
A degree in Computer Science or Engineering
Security industry certifications such as ISSAP, CISSP, or CISA/CISM

Responsibilities

Manage diverse security consulting engagements that include the analysis of solution designs, commercial and opensource software use cases, implementation plans, and network connectivity requirements.
Analyze new and existing technologies and provide recommendations for areas of security risk and alignment to Mastercard’s policies and technical standards.
Perform security and threat assessments by identifying inherent risks, exposures, and mitigating controls.
Develop concepts of operations and formal procedures for managing systems, developing security use cases, standardizing engineering processes, and developing processes for security operations.
Develop process flow diagrams and narratives with experience in implementing processes in a workflow management solution.

Benefits

insurance (including medical, prescription drug, dental, vision, disability, life insurance)
flexible spending account and health savings account
16 weeks of new parent leave
up to 20 days of bereavement leave
80 hours of Paid Sick and Safe Time
25 days of vacation time
5 personal days
10 annual paid U.S. observed holidays
401k with a best-in-class company match
deferred compensation for eligible roles
fitness reimbursement or on-site fitness facilities
eligibility for tuition reimbursement