Senior Vulnerability Analyst - Bug Bounty Program

About the role

Mastercard is looking for a Senior Vulnerability Analyst to manage its Bug Bounty Program and carry out advanced application security testing across web, mobile and API environments. The role validates externally reported vulnerabilities, runs penetration tests, works with engineering teams on remediation and helps strengthen Mastercard's security posture through proactive assessments.

Key responsibilities

• Manage the Bug Bounty program, including vulnerability intake, validation, triage and researcher engagement
• Conduct penetration testing of web, mobile and API-based applications
• Assess risk, prioritise findings and give remediation guidance
• Partner with product and engineering teams to drive timely remediation and validate fixes
• Develop reporting and metrics to measure program effectiveness and communicate risk

Required profile

• At least 3 years of experience in application security and penetration testing
• Ability to assess vulnerabilities, communicate risk and give actionable remediation advice
• Strong stakeholder management, analytical and problem-solving skills
• Experience with bug bounty or vulnerability disclosure programs and relevant security certifications is a plus

Required skills

• Web, mobile and API security, including OWASP Top 10 risks
• Hands-on use of tools such as Burp Suite, OWASP ZAP or similar testing platforms