Skip to main content
CareerApp

Principle, Vulnerability Analyst

Mastercard

O Fallon, MO · full time · Principal

$152,000 – $258,000

Listed on Mastercard’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

A Principal-level security analyst role focused on validating AI-generated vulnerability findings and driving their remediation across Mastercard's software environment. This position suits experienced security professionals who can bridge AI model outputs and engineering teams, making technical risk decisions and improving security processes at scale.

Our summary, not Mastercard’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Extensive vulnerability management or application security experience
  • Deep knowledge of common vulnerability classes and secure coding practices
  • Ability to review source code and dependency manifests for real-world risk assessment
  • Experience validating and remediating software vulnerabilities
  • Skill in working with application teams to drive remediation to completion
  • Strong analytical judgment to identify false positives and distinguish exploitable from theoretical risk
  • Experience with vulnerability tracking, remediation workflows, and closure evidence
  • Ability to communicate complex vulnerability details to diverse stakeholders
  • Strong written documentation and process creation skills

Nice to have

  • Familiarity with AI-assisted security workflows and model feedback loops
  • Experience in large enterprise security environments
  • Background mentoring analysts and engineers on security practices
  • Exposure to improving vulnerability operations at scale

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.