Mastercard

4 weeks ago

Threat Response Technology and Capabilities Product Owner

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Lead product owner for RESPOND incident response platform, defining strategy across Security Operations, DFIR, and Threat Response teams. Own multi-year roadmap for incident response tooling, automation, and AI augmentation, including SOAR platforms, case management, evidence workflows, and governance. Drive AI-assisted triage, notebook-based investigation, and autonomous response patterns to improve MTTR and analyst productivity across Mastercard's security operations.

Location: Australia

Workplace: Onsite

Employment Type: Full time

Job Function: Product Management

Key Responsibilities

•Own and execute the multi-year strategy and roadmap for evolving and scaling incident response capabilities, tooling, automation, and AI augmentation across Security Operations’ function.
•Define and maintain the RESPOND capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.
•Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.
•Define and oversee SOAR playbook automation builds, documentation, and execution; define the AI augmentation incident response strategy for security operations: agentic AI workflows, LLM-assisted triage, prompt libraries, notebook-based investigation, and human-in-the-loop autonomous response patterns.
•Establish governance, guardrails, and auditability for AI-assisted and AI-autonomous response actions in support of regulatory frameworks and audits.

Key Requirements

•Extensive hands-on experience in security operations, incident response, digital forensics, automation engineering, or security engineering, with at least 3 years in a product, architecture, or capability ownership role.
•Deep, hands-on expertise with SOAR tools, including playbook development, integration into Agentic AI tools, case management integration, custom app/connector creation, and platform administration.
•Proven enterprise-scale experience designing and operationalizing AI augmentation in security operations, including agentic AI workflows for triage, enrichment, and response; prompt engineering and maintained prompt libraries; notebook-based investigation; and LLM integration into SOAR/case management tooling.
•Strong DFIR background covering endpoint, network, cloud (AWS, Azure, GCP), identity, and SaaS forensics.
•Working proficiency in Python and PowerShell; comfortable reviewing and directing code without being the primary developer.

Experience:CybersecuritySecurity operations

Education:Master's

Skills:PythonPowerShellSOARAILLMDFIREDRXDRSIEMNotebookCloudAutomation

Tech Stack:Splunk SOARMicrosoft SentinelLogic AppsPythonPowerShellEDRXDRSIEMAWSAzureGCPLLMAINotebooks

Company Brief

Mastercard

Mastercard is a global payments and technology company that processes transactions, provides fraud prevention and data services, and builds payment infrastructure for consumers, businesses, merchants and governments across 200+ countries.

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Purchase, New York, United States

Founded: 1966

Glassdoor: 4.1

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Mastercard

4 weeks ago

Threat Response Technology and Capabilities Product Owner

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: Australia

Workplace: Onsite

Employment Type: Full time

Job Function: Product Management

Key Responsibilities

•Own and execute the multi-year strategy and roadmap for evolving and scaling incident response capabilities, tooling, automation, and AI augmentation across Security Operations’ function.
•Define and maintain the RESPOND capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.
•Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.
•Define and oversee SOAR playbook automation builds, documentation, and execution; define the AI augmentation incident response strategy for security operations: agentic AI workflows, LLM-assisted triage, prompt libraries, notebook-based investigation, and human-in-the-loop autonomous response patterns.
•Establish governance, guardrails, and auditability for AI-assisted and AI-autonomous response actions in support of regulatory frameworks and audits.

Key Requirements

•Extensive hands-on experience in security operations, incident response, digital forensics, automation engineering, or security engineering, with at least 3 years in a product, architecture, or capability ownership role.
•Deep, hands-on expertise with SOAR tools, including playbook development, integration into Agentic AI tools, case management integration, custom app/connector creation, and platform administration.
•Proven enterprise-scale experience designing and operationalizing AI augmentation in security operations, including agentic AI workflows for triage, enrichment, and response; prompt engineering and maintained prompt libraries; notebook-based investigation; and LLM integration into SOAR/case management tooling.
•Strong DFIR background covering endpoint, network, cloud (AWS, Azure, GCP), identity, and SaaS forensics.
•Working proficiency in Python and PowerShell; comfortable reviewing and directing code without being the primary developer.

Experience:CybersecuritySecurity operations

Education:Master's

Skills:PythonPowerShellSOARAILLMDFIREDRXDRSIEMNotebookCloudAutomation

Tech Stack:Splunk SOARMicrosoft SentinelLogic AppsPythonPowerShellEDRXDRSIEMAWSAzureGCPLLMAINotebooks

Company Brief

Mastercard

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Purchase, New York, United States

Founded: 1966

Glassdoor: 4.1

Website LinkedIn Glassdoor