Manages Mastercard’s Bug Bounty Program and performs advanced application security testing across web, mobile, and API environments. Responsibilities include validating reported vulnerabilities, conducting penetration tests, assessing risk, prioritizing findings, guiding remediation, partnering with engineering teams, validating fixes, and developing security metrics and reports.
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Vulnerability Analyst
Overview
Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.• Conduct penetration testing of web, mobile, and API-based applications.• Assess risk, prioritize findings, and provide remediation guidance.• Partner with product and engineering teams to drive timely remediation and validate fixes.• Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You• At least 3 years of experience in application security and penetration testing• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.• Strong stakeholder management, analytical, and problem-solving skills.• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Vulnerability Analyst
Overview
Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.• Conduct penetration testing of web, mobile, and API-based applications.• Assess risk, prioritize findings, and provide remediation guidance.• Partner with product and engineering teams to drive timely remediation and validate fixes.• Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You• At least 3 years of experience in application security and penetration testing• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.• Strong stakeholder management, analytical, and problem-solving skills.• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Mastercard London, England Office
Mastercard London, UK Office
1 Angel Lane, London, United Kingdom, EC4R 3AB
Similar Jobs at Mastercard
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Manage Mastercard’s Bug Bounty Program, validate and triage externally reported vulnerabilities, conduct penetration testing across web, mobile, and API applications, assess risk, guide remediation, validate fixes, and develop security metrics and reporting.
Top Skills:
Api SecurityBug Bounty ProgramsBurp SuiteMobile SecurityOwasp Top 10Owasp ZapPenetration TestingWeb Security
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Manage Mastercard’s Bug Bounty Program, validate and triage reported vulnerabilities, conduct penetration testing across web, mobile, and API applications, assess risk, prioritize findings, and guide remediation. Partner with engineering and product teams to validate fixes, develop security metrics, and communicate risk. The role requires strong application security, vulnerability management, stakeholder management, and analytical skills.
Top Skills:
Api SecurityBug Bounty PlatformsBurp SuiteMobile Application SecurityOwasp Top 10Owasp ZapPenetration TestingWeb Application Security
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Manage Mastercard’s Bug Bounty Program, validate and triage reported vulnerabilities, conduct penetration testing across web, mobile, and API applications, assess and prioritize risk, guide remediation, validate fixes, and develop security metrics and reports.
Top Skills:
Api SecurityBurp SuiteMobile Application SecurityOwasp Top 10Owasp ZapPenetration TestingWeb Application Security
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
