When password parameter value is not entered on "Build with parameters" but default value is used - this value is not masked, appears as clear text in Console output.

When value is entered masking works great.

Workaround for this issue is to specify Regular Expression for masking default value - something like /\bsupersecretpassword\b/ then masking works fine.