Security Engineering & Operations Team Lead

About the role

Mastercard Dynamic Yield is looking for an experienced Security Engineering & Operations Team Lead to lead the implementation and operation of security across its products, cloud platforms, software supply chain and AI-enabled systems. The role combines DevSecOps with broader security engineering, cloud and application security, AI security and security operations, leading a team that embeds security into the engineering lifecycle, automates preventive and detective controls and supports incident response.

Key responsibilities

• Lead a team of security engineers covering DevSecOps, security engineering and security operations in production and engineering environments.
• Design, implement and operate security controls across AWS, Kubernetes, applications, CI/CD pipelines, software dependencies and AI-enabled systems.
• Drive application and software supply chain security, including vulnerability management, security scanning, secrets protection and artifact integrity.
• Strengthen cloud security, identity and access management, data protection, network security and runtime protection.
• Develop and operationalize AI security guardrails, monitoring and secure integration patterns with Corporate Security.
• Lead or support security incident response, threat detection, investigation, containment and recovery.
• Partner with Corporate Security, Product Security and engineering teams on security architecture, threat modeling, risk remediation and technical security assessments.
• Automate security controls and improve compliance evidence, and mentor and coach team members.

Required profile

• At least 4 years of experience in a DevOps, DevSecOps, security engineering or security operations leadership role focused on production systems.
• Degree in Computer Science or a related discipline, relevant military experience or equivalent technical background.
• Proven experience securing and operating production environments on AWS, including cloud-native infrastructure and Kubernetes.
• Strong understanding of application security, secure SDLC, software supply chain security and vulnerability management.
• Experience with CI/CD platforms, infrastructure as code and security tooling integration.
• Familiarity with security monitoring, detection and response, incident management and observability tools such as Prometheus and Grafana.
• Understanding of IAM, encryption, secrets management, network security and cloud security controls.
• Leadership, project ownership and the ability to work with Corporate Security, Product Security, Engineering and DevOps.