Security Architecting (NCS/Job/ 4105)

Provide secure design and architecture advice to internal teams on how to securely develop and build applications and supporting systems.

• Define secure mechanisms for critical business functions.

• Work closely with developers and evaluate business requests and proposed designs to determine feasibility; work with software development teams to define alternatives and recommend optimal solutions to meet security and regulatory requirements in the design of new enhanced systems.

• Leverage security experience and knowledge within the digital commerce arena to cultivate and maintain effective working relationships with a variety of internal MasterCard stakeholders, including business owners, end-users, customers, project managers, engineers, and senior management

• Define security requirements and guidelines to ensure repeatable processes are followed by worldwide teams

• Assist in the strategy, standards, and architecture for the security aspects of the SDLC including application, mobile, web service, DevOps, Cloud, and CI/CD efforts.

All About You

• Interest in working closely with application/software engineering teams to provide guidance on security design and coding.

• Demonstrate a broad awareness of security engineering concepts and practices across all phases of the software development lifecycle, including strong OWASP knowledge.

• Experience providing security architecture advice for web based network environments and secure communication, including mobile applications, web applications and web services.

• Knowledge and technical security experience in cryptography, including several of the following: encryption, hashing, key management, digital certificates, mTLS.

• Knowledge of PCI security standards.

• Technical experience with Java/SpringBoot applications or similar enterprise programming language, especially related to secure coding best practices.

• Demonstrate technical competency in security engineering based on hands-on experience or relevant qualifications.

• Working knowledge and technical security experience with UNIX, Linux or containers.

• Strong verbal and written communication skills