Senior Security Monitoring and Response Analyst

Mastercard Inc.; Camden Town; On-site; GBP 60,000 - 90,000; Full time

Job summary

Mastercard Vocalink is seeking a driven Senior Security Operations Analyst with incident response capabilities to safeguard UK payments infrastructure. You will triage alerts, respond to incidents, perform root cause analysis, and work with security engineering and threat intelligence teams to improve detection and response.

Collaboration and knowledge-base development are key to success. The role emphasizes independent work and cross-team coordination to assess impact, mitigate risk, and

Qualifications

• Direct experience in a Security Operations Center (SOC).
• Experience in incident response or digital forensics roles.
• Experience across cybersecurity disciplines: vulnerability research, traffic analysis, malware analysis, forensics, memory analysis, web security, threat hunting.
• Experience creating queries/alerts in a SIEM, SPL preferred.
• Experience with Windows/Unix OS forensics.
• Experience with Cloud Security (Azure, AWS, GCP).
• Experience with NDR/EDR solutions.
• Familiarity with IoCs/IoAs/ATT&CK TTPs.
• Strong communication and collaboration skills.
• CISSP or GIAC certifications or equivalent.

Responsibilities

• Provide monitoring coverage, triage and investigation of escalated alerts (T3).
• Respond to cybersecurity incidents with playbook-based responses.
• Apply root cause analysis to improve security posture and processes.
• Collaborate with security engineering, threat intelligence and managed SOC services to automate monitoring and response.
• Develop and improve knowledge base, playbooks and use cases.
• Provide subject matter expertise for proactive initiatives and projects.
• Work independently and with teams to assess impact, mitigate risk, and resolve incidents.

Skills

SOC experience

Incident response

Cybersecurity disciplines

SPL queries

Forensics

Cloud security

NDR/EDR

IoCs/IoAs/TTPs

Interpersonal skills

CISSP/GIAC

Job description

Mastercard Vocalink is looking for a driven and motivated Senior Security Operations Analyst with Incident Response capabilities, to contribute to securing critical payments infrastructure in the UK.

In this role you'll be responsible for triaging alerts and responding to security incidents. When not actively engaged in ongoing incidents, the team works on the improvement and streamlining of the detection and response function.

Role Responsibilities

• Providing monitoring coverage, triage and investigation of escalated alerts (T3) from various sources.
• Responding to cybersecurity incidents through critical thinking, defining, and applying playbook responses
• Applying root cause analysis and lessons learned to improve security posture and processes
• Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response
• Strong collaboration with the team to develop knowledge base, playbook and use cases.
• Proactive initiatives and project-related support by providing subject matter expertise
• Ability to work independently as well as collaborate with different teams to assess impact, mitigate risk, and resolve security incidents.
• All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

Information Security Responsibilities

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

Required Experience & Skills

• Direct experience in a Security Operations Center (SOC).
• Experience working in an incident response or digital forensics role.
• Demonstrated experience with cybersecurity related disciplines, not limited to: e.g. vulnerability research, network traffic analysis, static and dynamic malware analysis, digital forensics, memory analysis, web-security and threat hunting.
• Preferred Experience: Experience in creating queries and alerts in a SIEM, preferably in SPL.
• Experience with Windows/Unix OS forensics.
• Experience with Cloud Security (Azure, AWS, GCP).
• Experience working with NDR/EDR solutions.
• Familiarity with Indicators of Compromise (IoCs), Indicators of Attack (IoAs), ATT&CK Tools, Techniques and Procedures (TTPs).
• Strong interpersonal skills, including good communication with the ability to articulate ideas in a precise and concise manner.
• CISSP, GIAC certifications or equivalent.

About the Company

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.