Senior Information Security Engineer

MasterCard; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

MasterCard is seeking a Senior Information Security Engineer in Toronto to support its security operations. The role involves managing security incidents, optimizing security services, and engaging with stakeholders to enhance the security posture of the organization. Ideal candidates bring extensive experience in information security technologies, alongside excellent communication skills and relevant certifications.

Qualifications

• Experience in PCI DSS, SOC or HIPAA environment is preferred.
• Certifications like CISSP, CCSP, CSSLP, OSCP are preferred.

Responsibilities

• Manage security incidents and maintain operational security posture.
• Collaborate with stakeholders to ensure compliance with security standards.
• Conduct internal vulnerability scans and manage necessary audits.

Skills

Linux administration

Network technology

Communication

Risk management

Incident response

Education

Bachelor's Degree or equivalent experience

Tools

CyberArk PIM

HSM

Splunk

Hashicorp Vault

QRadar

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build asustainableeconomy where everyone can prosper. We support a wide range of digital payments choices, making transactionssecure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Information Security EngineerJob Description Summary
To support our continued growth and success, we are seeking a Senior Information Security Engineer to assist in all operational aspects of our security program. The ideal candidate will have solid experience in information security technologies including; incident, vulnerability and threat management as well as excellent communication and technical abilities. If you are looking for a challenge that will allow you to collaborate within dynamic teams and work in a fast-paced environment, this position is for you.
Responsibilities:
• Contribute as a senior team member of Information Security Operations professionals
• Invite collaboration with both technical and business stakeholders advising on our security standards, policies and industry trends to help the business and customers succeed.
• Develop relationships to share knowledge and influence security objectives while being inclusive to all stake holders.
• Improve and maintain security services, focused on review efficiency, standards definition, and change management correctness.
• Maintain operational security posture through incident management, vulnerability management, key management, identity and access management, etc.
• Respond to security incidents, manage the process and escalate as required.
• Perform various security service functions including internal vulnerability scans, user access review, configuration and hardening validation and automation of many of these tasks within our SIEM.
• Document risk and mitigation controls, including policy/procedure updates.
• Participate in audits and assessments and provide support, as appropriate.
• Analyze established operational security controls and procedures and recommend improvements.
• Evaluate appropriate tools for supporting the security operations function.
• Participate in security on-call rotation.

Preference will be given to candidates with working experience in the following:
• Extensive Linux administration and troubleshooting experience.
• Extensive Network technology administration and troubleshooting experience.
• Low level PKI management and troubleshooting.
• CyberArk PIM.
• HSM for example Luna 7 or related appliances.
• KeySecure NAE,KMIP and related services.
• Splunk and Rsyslog filtering.
• Hashicorp Vault as it pertains to secret and PKI management.
• SIEMs like QRadar/Splunk ES/LogRhythm or related technologies

What you bring:
• Bachelor's Degree or equivalent experience/certification
• Windows and Linux/UNIX administration experience
• Solid understanding and troubleshooting is the ISO layer protocols.
• Working understanding of cryptography.
• Excellent verbal and written communication skills.
• Experience working in a PCI DSS, SOC or HIPPA environment
• Knowledge of all security domains including hardware security modules, single-sign on, and identity management.
• Preference will be given to candidates with the following certifications: CISSP, CCSP, CSSLP, OSCP, CISM etc.Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [e-mail] and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.