Principal Vulnerability Analyst – AI Security Operations

About the role

Mastercard’s AI Vulnerability Operations team is looking for a Principal Vulnerability Analyst to turn AI‑identified security findings into validated, prioritized, and remediated risk reductions across the company’s software environment.

Key responsibilities

• Validate AI‑generated vulnerability findings by reviewing code context, dependencies, architecture, runtime exposure, and exploitability evidence.
• Partner with application, engineering, product, and security teams to confirm ownership, assess impact, and drive remediation to closure.
• Translate AI model outputs into clear, actionable remediation guidance for engineering teams.
• Triage findings to separate true positives, false positives, duplicates, accepted risks, and configuration or dependency issues.
• Assess severity using factors such as exploitability, reachability, data sensitivity, business criticality, and compensating controls.
• Facilitate remediation discussions, remove blockers, and maintain momentum on high‑risk issues.
• Verify remediation outcomes through code reviews, dependency updates, configuration changes, and retest results.
• Document validation rationale, remediation decisions, residual risk, and closure evidence in tracking systems.
• Identify patterns across AI findings and provide feedback to improve model precision and workflow efficiency.

Required profile

• Proven experience validating vulnerabilities identified by AI or automated security tools.
• Ability to work directly with cross‑functional application, engineering, product, and security teams.
• Strong analytical skills to determine exploitability, relevance, reachability, and material impact of findings.
• Experience translating technical findings into clear remediation guidance.

Required skills