Senior Vulnerability Analyst

Mastercard; Tallaght; Presencial; EUR 90 000 - 120 000; Tempo integral

Resumo da oferta

Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced security testing across web, mobile, and API environments. This role validates externally reported vulnerabilities and helps strengthen Mastercard's security posture.

You will collaborate with engineering, product, and security teams to remediate findings, develop metrics, and communicate risk to stakeholders.

Qualificações

• At least 3 years of experience in application security and penetration testing.
• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.
• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.
• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.
• Strong stakeholder management, analytical, and problem-solving skills.
• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.

Responsabilidades

• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
• Conduct penetration testing of web, mobile, and API-based applications.
• Assess risk, prioritize findings, and provide remediation guidance.
• Partner with product and engineering teams to drive timely remediation and validate fixes.
• Develop reporting and metrics to measure program effectiveness and communicate risk.

Conhecimentos

Application security

Penetration testing

OWASP Top 10

Remediation guidance

Stakeholder management

Analytical thinking

Problem solving

Bug bounty programs

Security certifications

Ferramentas

Burp Suite

OWASP ZAP

Descrição da oferta de emprego

Our Purpose

_Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential._

Title and Summary

Senior Vulnerability Analyst

Overview

Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.

Role

• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
• Conduct penetration testing of web, mobile, and API-based applications.
• Assess risk, prioritize findings, and provide remediation guidance.
• Partner with product and engineering teams to drive timely remediation and validate fixes.
• Develop reporting and metrics to measure program effectiveness and communicate risk.

All About You

• At least 3 years of experience in application security and penetration testing
• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.
• Hands‑on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.
• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.
• Strong stakeholder management, analytical, and problem‑solving skills.
• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.

Corporate Security Responsibility

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.