Manage Mastercard’s bug bounty program, validate and triage reported vulnerabilities, conduct penetration testing across web, mobile, and API applications, assess and prioritize risk, guide remediation, collaborate with engineering teams, validate fixes, and develop program effectiveness metrics and security reporting.
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Vulnerability Analyst
Overview
Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.• Conduct penetration testing of web, mobile, and API-based applications.• Assess risk, prioritize findings, and provide remediation guidance.• Partner with product and engineering teams to drive timely remediation and validate fixes.• Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You• At least 3 years of experience in application security and penetration testing• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.• Strong stakeholder management, analytical, and problem-solving skills.• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Vulnerability Analyst
Overview
Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.• Conduct penetration testing of web, mobile, and API-based applications.• Assess risk, prioritize findings, and provide remediation guidance.• Partner with product and engineering teams to drive timely remediation and validate fixes.• Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You• At least 3 years of experience in application security and penetration testing• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.• Strong stakeholder management, analytical, and problem-solving skills.• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Similar Jobs at Mastercard
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Own the Small Business Credit Analytics data quality and governance strategy, roadmap, standards, KPIs, scorecards, and operational controls. Lead data stewardship, monitoring, observability, incident management, and root-cause investigations while partnering with Engineering, Data, Product, Compliance, Risk, and Customer Success teams. Translate customer impact and feedback into prioritized improvements that increase data accuracy, reliability, adoption, and trust.
Top Skills:
Anomaly DetectionAutomated MonitoringData ArchitectureData PipelinesData Quality PlatformsDatabricksDrift DetectionETLPysparkSparkSQLVector Databases
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Owns the Small Business Credit Analytics data quality and governance strategy, roadmap, standards, KPIs, scorecards, stewardship processes, monitoring, and operational controls. The role partners with Product, Engineering, Data Science, Operations, Privacy, Legal, Compliance, Risk, and Customer Success teams to resolve data issues, improve pipeline reliability, support governance requirements, and increase customer trust and adoption.
Top Skills:
Anomaly DetectionAutomated MonitoringData ArchitectureData PipelinesData ProfilingData Quality PlatformsDatabricksDrift DetectionETLPysparkSparkSQLVector Databases
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Design, develop, test, and maintain secure backend services, REST APIs, integrations, and microservices. Collaborate with product, architecture, engineering, and data teams to deliver technical solutions. Participate in code reviews, CI/CD, testing, releases, monitoring, troubleshooting, and root-cause analysis. Improve reliability, automation, and operational readiness while following security, privacy, and compliance standards.
Top Skills:
AlertingApi GatewaysBatch ProcessingCi/CdEvent-Driven ArchitectureGitJavaLoggingMessagingMicroservicesMonitoringObservabilityPythonRestful ApisShell ScriptingSpring BootSQLStream ProcessingUnix/Linux
What you need to know about the Bristol Tech Scene
Along with Gloucester, Swindon and Bath, Bristol is part of the "Silicon Gorge" tech hub, a region in the U.K. renowned for its high-tech and research-driven industries, with a particular emphasis on sustainability and reducing environmental impact. As the European Green Capital, Bristol is home to 25,000 cleantech companies, including Baker Hughes and unicorn Ovo Energy. The city has committed to achieving net-zero emissions within the next decade.
