Principal AI Vulnerability Analyst

Mastercard; O’Fallon (MO); On-site; USD 152,000 - 258,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

401k match

Tuition reimbursement

Paid parental leave

Vacation time

Job summary

Mastercard’s AI Vulnerability Operations team investigates AI-identified security findings to validate, prioritize, and remediate risk across Mastercard’s software environment. The Principal Vulnerability Analyst collaborates with application, engineering, product, and security teams to ensure findings are exploitable, relevant, and addressed with clear remediation actions.

You will translate AI outputs into actionable guidance, triage findings, assess severity, and drive remediation to closure

Qualifications

• Strong experience in vulnerability management and secure software development.
• Ability to validate AI-generated findings and drive remediation with engineering teams.
• Knowledge of OWASP, CWE, CVSS and exploitability analysis.

Responsibilities

• Validate AI-identified vulnerabilities by reviewing code context and architecture.
• Collaborate with product and engineering teams to confirm ownership and remediation options.
• Translate findings into actionable remediation guidance for developers.
• Triage AI findings to separate true/false positives and ensure timely closure.
• Document validation rationale and remediation progress in tracking systems.

Skills

Vulnerability validation

AI workflows

Remediation guidance

Threat modeling

Code review

Tools

OWASP

CWE

Job description

Mastercard’s AI Vulnerability Operations team investigates AI-identified security findings to validate, prioritize, and remediate risk across Mastercard’s software environment. The Principal Vulnerability Analyst collaborates with application, engineering, product, and security teams to ensure findings are exploitable, relevant, and addressed with clear remediation actions.

You will translate AI outputs into actionable guidance, triage findings, assess severity, and drive remediation to closure