Lead Information Security Engineer Job at Mastercard (Waterloo)

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime

Information Security Risk Lead

The Information Security Risk Lead is responsible for driving efforts to support...

Location

Thailand , Bangkok

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Master’s/Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred
One or more industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001
6 - 10 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance from BOT, SEC etc.
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with highly proficiency in both spoken and written English and Thai
Thai language fluency is a must.

Job Responsibility

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Engagement with local regulators BOT, SEC, TB-CERT, Thai-CERT, MDES, NCSA, etc. on IS related matters
Manage regulatory exams and internal & external audits
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for Thailand
Manage internal/external resources to organize cyber-attack simulations exercise, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders

Fulltime

Information Systems Security Engineer

The Information Systems Security Engineer provides support to the customer in th...

Location

United States , Westfields

Salary:

Not provided

Arcfield

Expiration Date

Until further notice

Requirements

Must possess and be able to maintain a TS/SCI with Poly
A Bachelors of Science degree with 10-12 years of relevant experience, a Master's degree with 8-10 years of relevant experience, or a PhD with 5-7 years of relevant experience
Able to support customer’s core hours (0900-1500
Mon – Fri)
A Cyber Certification (DoD 8570/8140)
Excellent communications skills – Verbal and Non-Verbal
Demonstrated expertise and experience in networking protocols and concepts
Demonstrated knowledge and experience in software defined networking principles and technologies
Demonstrated experience providing security engineering support
Demonstrated knowledge and experience in the NIST RMF

Job Responsibility

Collaborate with stakeholders to ensure their assets are compliant with the Risk Management Framework
Collaborate with government customer to provide status of cognizant assets, make recommendations when warranted and provide feedback to stakeholders
Provide analytical and technical security recommendations to the customer
Identify projects’ security requirements
Participate in network design reviews and security testing for the customer’s networks
Coordinate with system development teams to ensure network security standards are being followed and implemented correctly
Identify additional security requirements, based on RMF or as the result of security issues that put the customer’s systems at risk
Review and analyze new systems (hardware and software) and provides recommendations concerning their security
Provide A&A and RMF guidance to system owners to ensure accreditation success
Provide insight and recommendations leading up to and during the customer's information assurance readiness review process

Fulltime

Information Systems Security Engineer

Hoplite Solutions is seeking an Information Systems Security Engineer who will s...

Location

United States , Tysons

Salary:

Not provided

Hoplite Solutions

Expiration Date

Until further notice

Requirements

Minimum of 4-7 years' experience with: Application security standards and processes
Accreditation and Authorization (A&A), including documentation, POAMs, and remediation
Application and data security requirements for authorities to develop and operation systems (ATD, ATO) such as encryption, role-based security, information assurance, and monitoring/auditing/reporting
Coordination with engineering team to implement security requirements
Agile / Scrum

Job Responsibility

Lead for automated security testing efforts leveraging Sponsors enterprise scanning tools
Responsible for creation and delivery of the Monthly Vulnerability Scans
Responsible for creation and delivery of the Monthly Privileged Users and Admin report
Overall Lead for ensuring systems are secure by protecting data and ensuring need to know
Responsible for working with Tech team on creating any necessary POAM's
Helps PM with the Contract Security Plan
Works with PM and Sponsor's Information System Security Manager and INFOSEC Program Council as necessary
Authors and maintains the programs System Security Plan (SSP) for A&A
Provides the required security education and plan to sponsor for the program
Authors and maintains the programs Automated Information Systems (AIS) Plan

What we offer

Full coverage for health, dental, and vision insurance for both individuals and families
100% coverage for life insurance, long-term and short-term disability
Match up to 7% of employees' contributions to their 401(k) funds
Federal holiday calendar for paid holidays
4 weeks of paid time off
$5,000 yearly for education assistance or technical training
$3,000 yearly toward student loan repayment or a 529 College Savings Plan

Fulltime

Senior Information Security Engineer

This role is your opportunity to lead the charge in maturing e2Open’s security p...

Location

India , Bangalore

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

A proven track record in SIEM operations, vulnerability management, and incident response
Hands-on experience configuring and running security tools
Strong automation skills (e.g., scripting, orchestration)
The ability to lead through influence, guiding teams to adopt better practices
Experience navigating the challenges of complex, fast-changing environments (M&A exposure a plus)
Formal qualifications (CISSP, CISM, or equivalent) are valued

Job Responsibility

Configure, tune, and operate SIEM platforms to improve detection, response, and visibility
Lead vulnerability scanning and remediation
Take point in managing security incidents — from detection through investigation and resolution
Run and maintain key security tools
Drive automation-first approaches
Collaborate with engineering and IT teams to embed security into operations and culture
Help shape the roadmap for security maturity within e2Open

Security Chapter Lead

Lead our security strategy, governance, and operations across a consortium-based...

Location

Luxembourg , Leudelange

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Security, Computer Science, or related field
CISSP, CISM, CISA preferred
10+ years of experience in information security
Strong knowledge of security frameworks (NIST CSF, CIS Controls, OWASP Top 10)
Proven leadership of cross-functional security teams in complex environments
Excellent communication, stakeholder management, and decision-making skills

Job Responsibility

Define and execute the organization's security strategy, roadmap, and governance framework
Lead and organize the Security Office, collaborating with cross-functional squads and chapters
Establish and enforce security policies, standards, and compliance with regulations
Drive security architecture, engineering, and adoption of security-by-design principles
Oversee security awareness, training programs, and promote a culture of security-first thinking
Ensure compliance with regulatory and contractual security requirements
Lead security operations, monitoring, and incident response, including the Security Incident Response Team

What we offer

Access to Sopra Steria training and personal development academy
Company car lease or mobility budget
Company laptop and mobile phone
Private health insurance coverage
Meal vouchers
Social security and pension plan
Competitive salary
26 holiday days

Fulltime

Senior System Security and Information Assurance Engineer

The Senior PAM Engineer will play a critical role within Line of Effort 2, respo...

Location

United States , Tampa

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD Top Secret clearance with SCI eligibility
Master’s degree (MA/MS) in Cybersecurity, Information Technology, Computer Science, Engineering, or related field
10+ years of professional experience in cybersecurity, systems engineering, or information assurance
Meets Cyber Engineer – Senior labor category requirements, including independent execution of all functional duties and support to mission-critical program elements
DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, CCNA Security)
Deep expertise in Privileged Access Management (PAM) architectures and Zero Standing Privilege concepts
Hands-on experience implementing Just-In-Time (JIT) access workflows
Experience integrating PAM solutions with Active Directory, SIEM platforms (Splunk), and Identity Governance (IGA) tools
Experience producing technical documentation to support RMF and ATO processes (LLDs, SSPs, SOPs)
Ability to lead or oversee the efforts of less senior staff as required by program needs

Job Responsibility

Lead the installation, configuration, and technical implementation of an enterprise Privileged Access Management (PAM) solution (Delinea-focused) across multiple network enclaves
Discover, inventory, and onboard privileged user, administrator, and service accounts into a secure credential vault
Design and enforce policies for Just-In-Time (JIT) access, session monitoring, and session recording to achieve zero standing privileges
Develop scripts and API-based integrations between the PAM solution, Splunk SIEM, and Identity Governance (IGA) platforms
Support RMF accreditation activities by developing Low-Level Design (LLD) documents, System Security Plans (SSPs), and Standard Operating Procedures (SOPs)
Support Authority to Operate (ATO) efforts through security control implementation and technical validation
Lead enterprise rollout of PAM policies from pilot groups to full operational enforcement
Collaborate with Zero Trust architects, identity teams, and cyber engineers to ensure alignment with enterprise security architecture

Engineering Response Lead Engineer

Aruba, an HPE Company, is a leading provider of next-generation network access s...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
Typically 5+ years experience
Experience in LAN, WAN, cloud technologies, Linux, virtualization, scripting, and security
Python, C, C++, Javascript
Deep knowledge of routing, switching and security architecture and protocols
Expert level experience and understanding of protocols involved in networking, security and internet like - BGP, OSPF, EAPoL, ARP, VLAN, DHCP, VRRP, subnetting, ACL, routing, VRF, DNS, TCP, UDP, HTTP, IKE, IPSEC, HTTPS, proxies, load balancing, VoIP, SNMP, REST, JSON
Experience working with cloud platforms such as AWS, Azure, GCP and understanding vendor specific cloud computing techniques like Transit Gateway, VPC, Azure virtual WAN, Direct Connect
Experience in designing and architecting secure, resilient networks
Knowledge of security and vulnerability practices
Expertise in performance related tuning and deep packet level debugging

Job Responsibility

You will be called for engineering assistance by the highest level of services teams to investigate, debug and resolve complex technical issues
You will audit the overall architecture, deployment and configuration best practices in the SASE setup
You will troubleshoot customer environments to triage the issue and determine the root cause
You will maintain deep technical understanding of Silver Peak and other related HPE product features to deliver timely engineering response on critical technical issues
You will isolate customer issues and work with respective engineering SMEs to root cause and resolve product related issues through immediate workarounds and proper software fixes
You will document reoccurring issues to help Services team identify issues efficiently
You will aid Product Management by providing feedback on improving debug features on the SASE product family

What we offer

Comprehensive suite of benefits that supports physical, financial and emotional wellbeing
Personal & Professional Development programs
Inclusive working environment
Flexibility to manage work and personal needs

Fulltime

Lead Information Security Engineer

Mastercard

Location:
Belgium , Waterloo

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
January 06, 2026

Expiration:
January 19, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead Information Security Engineer

Senior Information Security Engineer

Information Security Risk Lead

Information Systems Security Engineer

Information Systems Security Engineer

Senior Information Security Engineer

Security Chapter Lead

Senior System Security and Information Assurance Engineer

Engineering Response Lead Engineer

Lead Information Security Engineer

Mastercard

Location:Belgium , Waterloo

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:January 06, 2026

Expiration:January 19, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead Information Security Engineer

Senior Information Security Engineer

Information Security Risk Lead

Information Systems Security Engineer

Information Systems Security Engineer

Senior Information Security Engineer

Security Chapter Lead

Senior System Security and Information Assurance Engineer

Engineering Response Lead Engineer

Location:
Belgium , Waterloo

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
January 06, 2026

Expiration:
January 19, 2026