Lead Information Security Engineer

Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title And Summary
Lead Information Security Engineer

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mission First, People Always

As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.

By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.

Overview
The Security Operations Defense and Automation (SODA) team is looking for a Lead Information Security Engineer to support and drive maturity of security products as well as contribute to supporting the remainder of the SODA security tool portfolio. The ideal candidate is passionate about securing Mastercard, highly motivated, intellectually curious, analytical, and possesses an entrepreneurial mindset. The role requires a blend of endpoint security experience, network security engineering experience, communication skills, and leadership talents in order to protect Mastercard and provide support for Mastercard associates.

Role

In This Position, You Will

• Lead the design, implementation, and enforcement of security monitoring that protect systems and data
• Liase with application development teams to ensure proper logging is enabled for security monitoring and audit purposes
• Implement and manage endpoint, network, and file integrity monitoring security systems
• Identify log sources needed for collection for both Security and Compliance for the SIEM
• Ensure protection of specific environments based on custom-made security tool configurations
• Work closely with the Security Operations Center and other Mastercard teams to deploy alerts triggered by suspicious or malicious activity

All About You
The ideal candidate for this position should have:

• Strong working knowledge of network security technologies
• Strong working knowledge of endpoint security technologies
• Strong working knowledge of file integrity monitoring technologies
• Strong understanding of regulatory frameworks and configuring controls to meet requirements
• Demonstrating control effectiveness during security audit interviews
• Strong understanding of TCP/IP, Mitre ATT&CK, Kill Chain, Vulnerability Management and Networking principles
• Experience with Windows and Unix Based Operating Systems
• Strong problem-solving skills to effectively research investigate and offer solutions to issues that are more complex and difficult in nature
• Ability to work effectively in ambiguous and/or high-pressure situations
• Be skilled at explaining technical problems succinctly and clearly
• Be a strong, confident, and exacting writer and speaker, able to communicate your vision and roadmap effectively to a wide variety of stakeholders
• Previous Security Operations Center experience a plus

Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.