Senior Security Engineer
Company: MasterCard Worldwide
Location: Seattle
Posted on: January 25, 2023
|
|
Job Description:
Our Purpose We work to connect and power an inclusive, digital
economy that benefits everyone, everywhere by making transactions
safe, simple, smart and accessible. Using secure data and networks,
partnerships and passion, our innovations and solutions help
individuals, financial institutions, governments and businesses
realize their greatest potential. Our decency quotient, or DQ,
drives our culture and everything we do inside and outside of our
company. We cultivate a culture of inclusion for all employees that
respects their individual strengths, views, and experiences. We
believe that our differences enable us to be a better team - one
that makes better decisions, drives innovation and delivers better
business results. Job Title Senior Security Engineer Who is
Mastercard? Mastercard is a global technology company in the
payments industry. Our mission is to connect and power an
inclusive, digital economy that benefits everyone, everywhere by
making transactions safe, simple, smart, and accessible. Using
secure data and networks, partnerships and passion, our innovations
and solutions help individuals, financial institutions,
governments, and businesses realize their greatest potential. Our
decency quotient, or DQ, drives our culture and everything we do
inside and outside of our company. With connections across more
than 210 countries and territories, we are building a sustainable
world that unlocks priceless possibilities for all. Overview
Mastercard is seeking candidates to join our team as a Senior
Security Engineer to work on integration projects focusing on
regulatory compliance, security audits and attestations. The focus
of the role is to help establish common security controls and
operating practices across a new Mastercard organization, to align
with our security standards. Can you manage libraries of technical
content to quickly and accurately respond to client questions to
support existing clients? Are you aware of standards and best
practices for managing security throughout an organization to
ensure successful business operation? Can you analyze system
architecture to reduce security risk to an acceptable level, while
still maintaining operational services? Role Hybrid role with a
strong understanding of security and compliance requirements.
Manage a repository of content that assist with security and due
diligence questionnaires. Implement and improve workflows through
governing policy and documentation surrounding security compliance.
Provide support with client security audits and third-party
attestations such as SOC 2. Evaluate vendor and security provider
compliance against standards. Collaborate with teams across the
organization to ensure compliance to security guidelines and
frameworks. Assist with preparation of ISO certification through
policy and controls. Influence the security design and architecture
by recommending optimal solutions to meet security and regulatory
requirements for new or enhanced systems. Propose security controls
to remediate identified gaps, while facilitating smooth ongoing
operations and processes. Maintain effective working relationships
with a variety of internal Mastercard stakeholders, including
business owners, end-users, customers, project managers, engineers,
and senior management. All About You Degree in computer
science/information security/software development or equivalent
demonstrated work experience. Experience with CMS tools. Five or
more (5+) years of experience with security frameworks (SOC, NIST,
ISO, PCI, ) Familiarity with regulatory compliance regulations
(GDPR, HIPAA, Privacy Shield, ) CISSP or Industry recognized
security certification desired. Strong understanding of information
security, risk and data privacy including relevant practical
experience. Technical understanding of how to secure cloud-based
services and applications in AWS or Azure. Layer 7 REST API attack
detection and prevention, static code analysis, application
security testing, vulnerability scanning and remediation.
Familiarity with programming languages: Clojure, Python, Scala,
Java Script, Kotlin Knowledge and experience in the practical
application of cryptography to protect data and communications,
e.g., encryption, hashing, key management, digital certificates,
TLS. Demonstrate the ability to articulate and communicate
effectively to diverse audiences and properly translates security
and risk management terminology into business terms, and recommends
alternative solutions to these stakeholders. Strong verbal and
written communication skills, with ability to communicate clearly
in a multi stakeholder environment. COVID-19 Considerations In many
locations, we've implemented a virtual hiring process and continue
to interview candidates by video or phone. In addition, in our NYC
offices, as required by law, only individuals who have been fully
vaccinated against COVID-19 will be permitted inside Mastercard
offices unless a reasonable accommodation has been approved in
advance. In the US, Mastercard is an inclusive Equal Employment
Opportunity employer that considers applicants without regard to
gender, gender identity, sexual orientation, race, ethnicity,
disabled or veteran status, or any other characteristic protected
by law. If you require accommodations or assistance to complete the
online application process, please contact and identify the type of
accommodation or assistance you are requesting. Do not include any
medical or health information in this email. The Reasonable
Accommodations team will respond to your email promptly. Corporate
Security Responsibility All activities involving access to
Mastercard assets, information, and networks comes with an inherent
risk to the organization and, therefore, it is expected that every
person working for, or on behalf of, Mastercard is responsible for
information security and must: Abide by Mastercard's security
policies and practices; Ensure the confidentiality and integrity of
the information being accessed; Report any suspected information
security violation or breach, and Complete all periodic mandatory
security trainings in accordance with Mastercard's guidelines.
Keywords: MasterCard Worldwide, Seattle , Senior Security Engineer, Other , Seattle, Washington
Click
here to apply!
|