*Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.*
Title and Summary
Senior Corporate Security Operations Analyst
Overview
Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role
Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
Conduct penetration testing of web, mobile, and API-based applications.
Assess risk, prioritize findings, and provide remediation guidance.
Partner with product and engineering teams to drive timely remediation and validate fixes.
Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You
At least 3 years of experience in application security and penetration testing
Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.
Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.
Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.
Strong stakeholder management, analytical, and problem-solving skills.
Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Everyone wants easier ways to pay;
we invent them.
Checkout lines are slow;
we speed them along.
Merchants want more sales;
we give them data and insights.
People need financial access;
we connect them.
Corporate purchasing is complicated;
we make it simple.
Commuters are busy;
we speed them on their way.
Governments need greater efficiencies;
we help create them.
Small businesses are virtual;
we give them access to a world of buyers.
Retailers want to fight fraud;
we provide the tools.
Senior
Pay
Pay is not stated in the ad.
Estimate take-home pay for a figure you enter
Estimated take-home pay
Explore gross pay after typical payroll taxes for a work location.
Illustrative estimate only; assumes a standard employee profile and may omit benefits, pensions, credits and local rules. Regional and city-specific tax applies only where the selected calculator supports it; other results are country-level. Salary and location are sent only when you calculate: Paysums for supported regions, or WorthOf for wider country coverage. Confirm with an official payroll or tax source before making decisions.
Visa sponsorship and relocation: not stated in the ad.
JobCheckPoint never asks candidates to pay, and genuine employers shouldn't either. If this job asks you for money (registration, training, visa or equipment fees), don't pay. Report it below.