Principal Security Engineer

About the role

The Principal Security Engineer acts as a trusted advisor to development teams, helping embed security directly into the software development lifecycle. This senior, hands‑on role focuses on developer enablement, ensuring security practices are practical, actionable, and scale across Mastercard.

Key responsibilities

• Create scalable, developer‑friendly threat‑modeling collateral such as blueprints, threat libraries, and templates.
• Implement and evolve threat‑modeling methodologies.
• Establish review and governance practices that drive consistent, high‑quality security outcomes.
• Design and deliver formal learning and enablement programs for engineers and architects.
• Partner closely with development teams to embed security naturally into workflows.

Required profile

• Senior security practitioner with extensive hands‑on experience in threat modeling and secure software design.
• Proven ability to operate at scale, influence cross‑functional teams, and coach developers and architects.
• Strong communication skills and a passion for building developer‑centric security practices.

Required skills

• Threat modeling
• Secure software design