MastercardSenior Vulnerability Analyst
Mastercard is hiring a Senior Vulnerability Analyst in Dublin, Ireland. Level rates it ; you can apply on Mastercard.
Level's read on this job
- Level rates this role Little AI ●○○○: aI is not part of the work.
- The posting mentions Burp Suite, Owasp Zap and penetration testing among its tools and skills.
- Level classes it as a senior role.
- Mastercard has 1,100+ other open roles on Level.
- Posted within the past two weeks.
AI in this role
Manage the bug bounty program and perform advanced application security testing across various environments.
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Vulnerability AnalystOverviewMastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management.
Role
• Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement.
• Conduct penetration testing of web, mobile, and API-based applications.
• Assess risk, prioritize findings, and provide remediation guidance.
• Partner with product and engineering teams to drive timely remediation and validate fixes.
• Develop reporting and metrics to measure program effectiveness and communicate risk.
All About You
• At least 3 years of experience in application security and penetration testing
• Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks.
• Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms.
• Ability to assess vulnerabilities, communicate risk, and provide actionable remediation guidance.
• Strong stakeholder management, analytical, and problem-solving skills.
• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
How we rate this
Senior Vulnerability Analyst at Mastercard rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Tell me about a project where penetration testing was part of your work. What did you do?
- Tell me about a project where vulnerability management was part of your work. What did you do?
- Tell me about a project where application security was part of your work. What did you do?
- Tell me about a project where bug bounty was part of your work. What did you do?
- Walk me through how you've used Burp Suite in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Penetration Testing, Vulnerability Management, Application Security, Bug Bounty, and Burp Suite. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.
Get new AI jobs by email
One email a week with the new AI jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Other roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step