Senior Vulnerability Analyst: Bug Bounty & AppSec Lead

Mastercard; Howth; On-site; EUR 90,000 - 110,000; Full time

Job summary

Mastercard seeks a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced security testing across web, mobile, and API environments. This role validates externally reported vulnerabilities, conducts penetration testing, and partners with engineering to remediate findings.

You will develop reporting and metrics to strengthen Mastercard's security posture, communicating risk and prioritizing remediation across teams.

Qualifications

• At least 3 years of experience in application security and penetration testing.
• Strong knowledge of web, mobile, and API security (OWASP Top 10).
• Hands-on experience with Burp Suite, OWASP ZAP, or similar tools.
• Ability to assess vulnerabilities and communicate risk with remediation guidance.
• Experience with bug bounty or vulnerability disclosure programs is a plus.

Responsibilities

• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
• Conduct penetration testing of web, mobile, and API-based applications.
• Assess risk, prioritize findings, and provide remediation guidance.
• Partner with product and engineering teams to drive timely remediation and validate fixes.
• Develop reporting and metrics to measure program effectiveness and communicate risk.

Skills

Bug bounty

Penetration testing

Burp Suite

OWASP ZAP

OWASP Top 10

Tools

Burp Suite

OWASP ZAP

Job description

Mastercard seeks a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced security testing across web, mobile, and API environments. This role validates externally reported vulnerabilities, conducts penetration testing, and partners with engineering to remediate findings.

You will develop reporting and metrics to strengthen Mastercard's security posture, communicating risk and prioritizing remediation across teams.