Security Engineering & Operations Team Lead

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Security Engineering & Operations Team Lead

Overview Mastercard Dynamic Yield is seeking an experienced Security Engineering & Operations Team Lead to lead the implementation and operation of security capabilities across our products, cloud platforms, software supply chain, and AI-enabled systems. This role combines our existing DevSecOps responsibilities with broader security engineering, cloud and application security, AI security, and security operations. You’ll lead a team responsible for embedding security into the engineering lifecycle, automating preventive and detective controls, strengthening our security posture, and supporting technical incident response. Working closely with Corporate Security, Product Security, Engineering, and DevOps, you’ll translate security requirements into scalable technical solutions that enable secure innovation and business growth.

*Role*

Lead a team of security engineers responsible for DevSecOps, security engineering, and security operations across production and engineering environments.

Design, implement, and operate security controls across AWS, Kubernetes, applications, CI/CD pipelines, software dependencies, and AI-enabled systems.

Drive application and software supply chain security, including vulnerability management, security scanning, secrets protection, and artifact integrity.

Strengthen cloud security, identity and access management, data protection, network security, and runtime protection capabilities.

Develop and operationalize AI security guardrails, monitoring, and secure integration patterns in partnership with Corporate Security.

Lead or support security incident response, threat detection, investigation, containment, and recovery.

Partner with Corporate Security, Product Security, and engineering teams on security architecture, threat modeling, risk remediation, and technical security assessments.

Automate security controls and continuously improve security capabilities, operational effectiveness, and compliance evidence. Mentor and coach team members, fostering technical excellence, ownership, and professional growth.

*Optimal Skills for Success*

• At least 4 years of experience in a DevOps, DevSecOps, security engineering, or security operations leadership role, with a strong focus on production systems.
• A degree in Computer Science or a related discipline, relevant military experience, or an equivalent technical background.
• Proven experience securing and operating production environments on AWS, including cloud-native infrastructure and Kubernetes.
• Strong understanding of application security, secure SDLC practices, software supply chain security, and vulnerability management.
• Proficiency in one or more programming languages, such as Go, JavaScript, TypeScript, or Python, with experience automating security capabilities.
• Experience with CI/CD platforms such as GitHub Actions, infrastructure as code such as Terraform or CloudFormation, and security tooling integration.
• Familiarity with security monitoring, detection and response, incident management, and observability tools such as Prometheus and Grafana.
• Understanding of identity and access management, encryption, secrets management, network security, and cloud security controls.
• Ability to collaborate effectively with Corporate Security, Product Security, Engineering, DevOps, and other cross-functional teams.
• Demonstrated leadership, project ownership, prioritization, and the ability to translate security requirements into practical, scalable engineering solutions.

Join us at Mastercard Dynamic Yield to lead the evolution of our security engineering and operations capabilities, protect our products and infrastructure, and enable secure innovation across cloud, software, and AI.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.