Lead Information Security Engineer (Cloud Security)

About the role

Mastercard is seeking a Lead Information Security Engineer to secure its public cloud environments. This hands‑on position focuses on implementing and operating a Cloud Native Application Protection Platform (CNAPP) and related security capabilities at scale.

Key responsibilities

• Lead operation and administration of the CNAPP platform (CSPM, CWPP, CI/CD security) across public and hybrid cloud environments.
• Execute onboarding and lifecycle management of cloud accounts, Kubernetes clusters, and CI/CD pipelines into the CNAPP platform.
• Analyze, triage, and prioritize findings such as misconfigurations, workload vulnerabilities, runtime alerts, and policy violations.
• Partner with cloud platform, DevOps, SOC, and Vulnerability Management teams to track remediation and validate closure of cloud risks.
• Provide operational security guidance to engineering teams on remediation options and secure configuration patterns.
• Support secure cloud design by validating configurations against regulatory, internal, and industry standards.

Required profile

• Hands‑on experience securing public cloud environments at scale.
• Proven ability to lead cloud security initiatives and collaborate with cross‑functional teams.
• Strong analytical skills for triaging security findings and driving remediation.

Required skills

• CNAPP platforms (CSPM, CWPP, CI/CD security)
• Kubernetes cluster security
• Cloud account and workload lifecycle management
• Integration with CI/CD pipelines
• Collaboration with DevOps, SOC, and Vulnerability Management
• Knowledge of regulatory and industry security standards