Senior Platform Engineer - Patch Management

Mastercard; Greater London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading global payment technology company seeks a Senior Platform Engineer to enhance security through effective patch and vulnerability management. This position plays a critical role in maintaining compliance and stability across platforms by collaborating with teams to address security risks. Candidates should have substantial experience with vulnerabilities and security tools like Qualys. The role also emphasizes continuous improvement in security practices. This opportunity is based in Greater London and offers robust career development potential.

Qualifications

• Strong experience in patch management, vulnerability management, and technical security testing.
• Hands-on expertise with security tools and risk assessment methodologies.
• Proven ability to collaborate across teams.

Responsibilities

• Act as a subject matter expert for patching and vulnerability management.
• Conduct internal vulnerability scanning and technical security testing.
• Work closely with internal stakeholders to address vulnerabilities.

Skills

Patch management

Vulnerability management

Technical security testing

Collaboration

Process improvements

Tools

Qualys

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Platform Engineer - Patch Management Overview

The Senior Platform Engineer plays a critical role in Patch Management, Vulnerability Management, and Technical Security Testing (including internal vulnerability scanning using tools such as Qualys) across Mastercard NPP O&T Network platforms. This position ensures the security and stability of our services by maintaining compliance with SLAs and availability targets. The role requires technical expertise, proactive risk management, and collaboration with cross-functional teams to deliver secure and resilient platform solutions.

Key Responsibilities

• Technical Ownership
• Act as a subject matter expert for patching, vulnerability management, and platform security posture.
• Perform vulnerability risk assessments and implement mitigation strategies in collaboration with technology teams.
• Participate in planning and execution of system/platform updates to optimise security and compliance.
• Security Operations
• Conduct internal vulnerability scanning and technical security testing using industry-standard tools.
• Support the Security Incident Management process, contributing to root cause analysis and remediation.
• Provide KPI reporting and maintain accurate documentation of security activities.
• Collaboration & Communication
• Work closely with internal stakeholders to raise awareness of vulnerabilities and remediation plans.
• Partner with development and infrastructure teams to ensure timely resolution of security issues.
• Continuous Improvement
• Identify opportunities for process improvements and automation to enhance operational efficiency.
• Stay informed on emerging security trends and tools, recommending enhancements where appropriate.

Required Experience

• Strong experience in patch management, vulnerability management, and technical security testing.
• Hands‑on expertise with security tools (e.g., Qualys) and risk assessment methodologies.
• Proven ability to collaborate across teams to deliver secure platform solutions.
• Experience contributing to process improvements and automation initiatives.
• Skilled in preparing reports and presenting technical information to stakeholders.

Preferred Skills

• Knowledge of network and platform architecture within regulated environments.
• Familiarity with compliance standards (PCI DSS, ISO 27001) and risk management frameworks.
• Strong analytical and problem‑solving skills with attention to detail.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach;
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.