Senior Security Engineer

Mastercard•O'fallon, MO

1d•Onsite

About The Position

The Business Security Enablement Guild is a worldwide team of information security experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do. The ideal candidate needs an elevated level of expertise in information security and secure engineering disciplines. This role involves applying knowledge of security principles, theories, and concepts to technology reviews, working independently on reviews of third-party technologies and internally developed applications, and collaborating closely with stakeholders to evaluate business requests and determine feasibility. The engineer will provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems and ensure established security policies and standards are observed on projects. Additionally, the role requires preparing and presenting business/technical presentations.

Requirements

3-7 years of work experience in information security disciplines.
Advanced knowledge of security protocols and standards.
Experience with software, security architecture and security designs.
Technical experience with Programming Languages.
Knowledge or technical security experience in Cryptography.
Knowledge or hands on experience securing AI/ML enabled systems, including: AI data flows, model lifecycle risks, and inference security, Risks related to training data, model access, prompt injection, and misuse.
Familiarity with AI security and governance concepts, such as: Secure use of third party AI platforms and services, Data protection, privacy, and regulatory considerations in AI solutions, Threat modeling for AI driven and data intensive architectures.
Moderate hands-on administrative and security experience with Windows and Linux systems.
Working knowledge of symmetric and asymmetric encryption, Digital Certificates, SSL, VPN, IPSec, WAF’s and other security tools and processes such as privileged identity management, file integrity, audit, logging and IDS/IPS.
Moderate hands on scripting experience, including automation to improve security review efficiency.

Nice To Haves

CISSP or Industry recognized security certification is a nice to have.

Responsibilities

Apply knowledge of security principles, theories, and concepts to technology reviews.
Work independently on reviews of third-party technologies and internally developed applications.
Work closely with stakeholders to evaluate business requests to determine feasibility.
Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems.
Ensure established security policies and standards are observed on projects.
Prepare and present business/technical presentations.
Abide by Mastercard’s security policies and practices.
Ensure the confidentiality and integrity of the information being accessed.
Report any suspected information security violation or breach.
Complete all periodic mandatory security training in accordance with Mastercard’s guidelines.

Benefits

insurance (including medical, prescription drug, dental, vision, disability, life insurance)
flexible spending account and health savings account
16 weeks of new parent leave
up to 20 days of bereavement leave
80 hours of Paid Sick and Safe Time
25 days of vacation time
5 personal days
10 annual paid U.S. observed holidays
401k with a best-in-class company match
deferred compensation for eligible roles
fitness reimbursement or on-site fitness facilities
eligibility for tuition reimbursement