Senior Vulnerability Analyst - Bug Bounty & App Security

Mastercard; Lusk; On-site; EUR 90,000 - 130,000; Full time

Job summary

Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced security testing across web, mobile, and API environments. This role involves validating externally reported vulnerabilities, conducting penetration testing, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.

In this position you will partner with engineering teams to drive remediation, develop reporting, and communicate

Qualifications

• At least 3 years in application security and penetration testing.
• Strong knowledge of web, mobile, and API security including OWASP Top 10.
• Hands-on with Burp Suite, OWASP ZAP, or similar testing platforms.
• Ability to assess vulnerabilities, communicate risk and remediation guidance.
• Strong stakeholder management, analytical and problem-solving skills.
• Experience with bug bounty programs and security certifications is a plus.

Responsibilities

• Manage Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
• Conduct penetration testing of web, mobile, and API-based applications.
• Assess risk, prioritize findings, and provide remediation guidance.
• Partner with product and engineering teams to drive timely remediation and validate fixes.
• Develop reporting and metrics to measure program effectiveness and communicate risk.

Skills

Experience in security

Penetration testing

Stakeholder management

Tools

Burp Suite

OWASP ZAP

Job description

Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced security testing across web, mobile, and API environments. This role involves validating externally reported vulnerabilities, conducting penetration testing, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.

In this position you will partner with engineering teams to drive remediation, develop reporting, and communicate