Information Security Engineer II

@ Mastercard

Our Purpose

Mastercard powers economies and empowers people in 200+ countries worldwide. Together with customers, Mastercard builds a sustainable economy with secure, simple, smart and accessible digital payment choices. Its technology, innovation, partnerships, and networks help people, businesses and governments realize their potential.

Overview

The Information Security Engineer II is responsible for managing and enhancing Mastercard's web application security infrastructure. This role requires deep knowledge in application and network security, modern security frameworks, cloud environments, and incident response practices.

Role

• Manage and optimize Imperva Web Application Firewall (WAF) or similar platforms.
• Conduct application security assessments aligned with OWASP Top 10 and industry standards.
• Administer and review AWS IAM policies, roles, and access controls.
• Support firewall infrastructure with emphasis on Palo Alto Networks.
• Collaborate with IT and security teams on secure network architecture.
• Drive incident response, including root cause analysis and mitigation strategies.
• Participate in infrastructure design reviews to enforce security best practices.
• Engage in security governance and compliance activities for SaaS and cloud environments.

All About You / Experience

• Proven experience with Imperva WAF or similar platforms.
• Deep understanding of OWASP Top 10, NVD databases, and CVSS scoring.
• Strong background in application security testing and assessments.
• Hands-on experience with AWS IAM and role-based access control.
• Proficient with TCP/IP, HTTP, DNS, SSL/TLS, APIs, HTML, and JavaScript.
• Familiarity with Palo Alto Networks firewall systems.
• Knowledge of load balancing, network routing, and virtualization platforms.
• Experience in security incident response and detailed reporting.
• Understanding of IT infrastructure design with a security focus.
• Certifications such as CISSP or AWS Security Specialist are preferred.

Corporate Security Responsibility

All personnel must abide by Mastercard’s security policies to ensure confidentiality and integrity of information. This includes reporting security breaches and completing mandatory security trainings as per Mastercard guidelines.

Key skills/competency

• Web Application Firewall
• Imperva
• AWS IAM
• Palo Alto
• OWASP
• Incident Response
• Network Security
• Security Assessments
• Cloud Security
• Compliance