Security Monitoring and Response Analyst II

Mastercard

Confirmed live today High trust

Quick summary

Work type
On-site
Location
O'Fallon, MO
Salary
$76,000–$127,000 / yr
Posted
11 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $151k
This role $102k
$62k $209k
below market most similar roles pay here above market

This role pays less than 85% of similar roles. Most pay $121,295–$180,135 — the blue band above. At the midpoint, this role pays about $102k versus about $151k for comparable roles.

Based on 240 similar postings.

Employer

About Mastercard

Mastercard is a global technology company in the payments industry, processing transactions between financial institutions and merchants using its extensive network of credit, debit, and prepaid card products. Industry: Payments Technology & Financial Services

Mastercard currently has 150 open roles on FindRole.

Listed pay typically runs $122,000–$207,000 across 142 roles with salary data.

Most-posted roles

View all roles at Mastercard

At a glance

TL;DR · Security Monitoring and Response Analyst II

The Security Monitoring and Response Analyst II joins the Security Event Management group as an Insider Threat Analyst. In this role, you will conduct technical analysis of user activity data to identify high-impact insider threats and perform internal investigations. You will monitor alerts from a suite of security tools, research complex cases, and present findings to senior legal, privacy, and executive stakeholders. Key responsibilities include identifying control gaps, mentoring first-line analysts, and supporting the development of incident response capabilities. You will utilize technologies including DLP, EDR, SIEM, and user behavior analytics, specifically Microsoft Purview, Microsoft Defender, Microsoft Sentinel, and Endpoint DLP. Required skills include knowledge of Windows and macOS, threat hunting, OSINT, and experience with privacy regulations like GDPR. Programming in Python or PowerShell is also desirable.

What you'll do

  • Conduct technical analysis of user activity data and alerts to identify indicators of insider threats.
  • Lead independent investigations into complex, high-risk, and sensitive insider threat cases.
  • Monitor and analyze data from security tools including DLP, EDR, SIEM, and user behavior analytics.
  • Prepare and present analysis, findings, and recommendations to security leads and executive stakeholders.
  • Identify control gaps and collaborate with engineering teams to improve prevention and detection capabilities.
  • Liaise with HR, Legal, and Privacy partners to progress internal investigations.
  • Mentor first-line analysts to embed key insider threat processes and procedures within their capabilities.
  • Analyze program trends and metrics to identify improvements and support leadership decisions.

What we're looking for

  • Experience in security operations, incident response, insider risk, digital forensics, or related cybersecurity disciplines.
  • Ability to independently conduct confidential investigations involving employee activity with professionalism and evidentiary integrity.
  • Understanding of investigative methodologies, evidentiary handling, chain of custody, and detailed report writing.
  • Understanding of privacy, data protection, and regulatory considerations, including GDPR.
  • Experience with Data Loss Prevention, User Activity Monitoring, User Behavior Analytics, or related capabilities.
  • Experience with Microsoft security technologies including Purview, Defender/IRM, Sentinel, and Endpoint DLP.
  • Experience with SIEM platforms and security event analysis.
  • Working knowledge of Windows and macOS operating systems, including architectural and investigative differences.
  • Familiarity with threat hunting methodologies, OSINT, and cyber investigation techniques.
  • Relevant industry certifications such as CISSP, GCIH, GCIA, Security+, or equivalent (preferred).
  • Programming experience in PowerShell, Python, Shell/BASH, Java, C/C++, C#, Perl, or other related languages (preferred).

More like this

Similar roles

Insider Threat Monitoring Analyst

Leidos

Ashburn, VA 106 days ago $107,900–$195,050
Digital Forensics Insider Threat Analysis Data Loss Prevention (DLP) User Activity Monitoring (UAM) Endpoint Detection and Response (EDR) NIST 800-88 CISSP GREM Incident Response Defense-in-Depth Network Topology Information Spillage Forensic Analysis
8+ yrs exp

Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)

Mastercard

O'Fallon, MO 10 days ago $122,000–$207,000
Data Loss Prevention (DLP) User Activity Monitoring (UAM) User Behavior Analytics (UBA) Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP SIEM Incident Response Digital Forensics Threat Hunting OSINT Windows macOS GDPR CISSP GCIH GCIA Security+

Incident Response Analyst, Senior

Booz Allen Hamilton

Bethesda, MD 45 days ago
Splunk SIEM EDR IDS IPS SOAR Microsoft Defender Vulnerability Management Digital Forensics Packet Analysis Threat Hunting Behavioral Analytics Threat Intelligence Identity and Access Management Container Security API Security Log Analysis Incident Response Playbooks
5+ yrs exp

Senior Insider Threat Engineer

Humana

Remote (Louisville, KY) +9 20 days ago $97,900–$133,500
Microsoft Purview Proofpoint Insider Threat Management KQL PowerShell Microsoft Graph API Splunk Defender XDR UEBA EDR SIEM Data Loss Prevention eDiscovery Claude Code HIPAA HITRUST PCI-DSS SOC2
5+ yrs exp Remote