Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

EDUCATION

Degree or equivalent work experience equally preferable

Degree in computer science, information security, business, management, cybersecurity, engineering, math, information technology, statistics, operations research, data science, or related field

CERTIFICATIONS

Certified Ethical Hacker (CEH)
Certified in Governance, Risk and Compliance (CGRC; formerly Certified Authorization Professional [CAP])
Certified Information System Auditor (CISA)
Certified Information Systems Manager (CISM)
Certified Information Systems Security Professional (CISSP)
Certified Project Management Professional (CPMP)
GIAC Certified Incident Handler (GCIH)
GIAC Security Essentials Certification (GSEC)
Global Information Assurance Certification (GIAC)
Imperva Database Security Specialist (IDSS)
Microsoft Certified Software Engineer (MCSE)
Offensive Security Certified Professional (OSCP)
Security+
Six Sigma
SysAdmin, Audit, Network and Security (SANS)

WORK EXPERIENCE

Strong technical experience in cybersecurity, insider threat, incident response, security operations, or related information security field

Experience working in database security, data loss prevention (DLP) engineering, data security engineering, encryption engineering, insider threats, network security, PKI engineering, security analytics, system security, systems and software security (SSS), technical security standards compliance, threat and vulnerability management (TVM), or related field

Experience in the banking or finance industries preferred

FUNCTIONAL SKILLS

FOUNDATIONAL SKILLS

Exceptional team member who will drive innovation while never losing site of the basics - Exceptional ability to execute and drive change - Strong drive to build a best in the world program - Strategic, creative, and innovative mind - Zero tolerance for operational, design, and strategy oriented gaps - Absolute self-starter who will take the lead and initiative to find and solve problems - Be able to communicate many examples of where you drove positive change

RESPONSIBILITIES

Designing, developing, testing, documenting, monitoring, and implementing information and database security solutions to enforce security strategies and support to new/existing systems in accordance with policies, standards, guidelines and procedures.
Serve as a trusted partner to business, operations, development, risk and compliance teams providing database security subject matter expert (SME) guidance and analysis.
Managing a database activity monitoring (DAM) platform for security and audit compliance, including policy creation, event and trend analysis, performance monitoring and infrastructure maintenance.
Developing and maintaining database security standards, guidelines and procedures for hardening database configurations, users and roles, profiles, etc.
Refining and enhancing existing controls, policies, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of data.
Evaluating updates to new/existing database security controls by determining the strengths/weaknesses and coordinate the testing and implementation of the new/enhanced controls with all business partners that are affected.
Identifying weak links in information security products and determine how to mitigate the control deficiencies.
Enhancing preventive systems used to stop and/or deter security breaches.
Evaluating database security patches from vendors and assesses potential risk and work with stakeholders to address vulnerabilities.
Respond to security Incidents and assist with Tier-1 and Tier-2 incident investigations.
Performing root cause analysis of security violations to determine if they are the result of misconfiguration or malfunction or if they are malicious, and taking appropriate action depending on circumstances.
Evaluating new database releases/updates to ensure they are appropriately integrated into the security program and existing controls are effective with the updates.
Working with database custodians at different levels of the organization to understand their respective security needs and assist with implementing practices and procedures consistent with the bank information security policy.
Conducting and identifying database security compliance issues and ensure that any non-compliance to security baseline configurations are identified, tracked and assigned to stakeholders for remediation.
Working with internal and external auditors to demonstrate and provide evidence of security controls are adherence to regulatory compliance.
Executing and enhancing monitoring systems used to detect and report security violations.
Administering the DLP system and policies to enforce on endpoint sensors and refining DLP security standards
Developing actionable detections for latest data leakage methods
Developing and maintaining the security guidelines and procedures for DLP
Evaluating and enhancing new/existing security controls to ensure relevance and effectiveness.
Creating and managing process for identifying, prioritizing and remediating security gaps and weakness.
Conducting analyzing and following up with key stakeholders for forensic investigation and remediation.
Investigating DLP incidents to reduce the risk imposed to the Bank.
Providing configurations and process enhancement proposals supported by Use Case scenarios.
Developing regular data leakage trending and performance metrics on DLP activities.
Working with vendors on providing product updates, bug fixes and managing relations.
Provide administration and operationally support adopted endpoint security technology covering EDR (Endpoint Detection and Response) and Next-Gen Anti-virus solution.
Execute entire change and release management process for deployments, enhancements, upgrades, and hotfixes across all feature sets to include communications, planning, testing, deployment, and monitoring.
Provide Subject Matter Expertise and demonstrate in-depth understanding of the TTPs (Tactics, Techniques and Procedures) used by threat actors against endpoints. Leverage EDR, Next-Gen AV and other security controls to protect systems against internal and external threats.
Closely work with Security operations center and other security groups during investigation of any security breach.
Be able to triage security logs, recommend containment controls and lead remediation steps.
Demonstrate mastery in log file analysis, fault isolation and diagnostic/assessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions.
Stay current on endpoint security best practices, active threats and mitigation strategies.
Drive continuous innovation with new ideas on improving and maturing endpoint security posture.
Maintain metrics and supporting analytics on System and endpoint Security.
Design, build, operate and maintain network security infrastructure (e.g. Firewalls, VPNs) with focus on AWS Cloud Services.
Assess risk and implement solutions.
Respond and resolve production issues.
Develop network security controls and standards.
Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise.
Documentation of control states and performing gap analysis
Design, review and improve process flows
Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies
Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering
Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise.
Documentation of control states and performing gap analysis
Design, review and improve process flows
Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies
Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering
Inspects outbound traffic to prevent traffic from specific computers and filtering to prevent sensitive data leakage
Enforces security policies which move data between networks using secure, authenticated, and encrypted mechanisms
Performs an assessment of data to identify sensitive information that requires the application of encryption and integrity controls
Deploys approved hard drive encryption software to mobile devices and systems that hold sensitive data
Verifies that cryptographic devices and software are configured to use publicly vetted algorithms
Regularly reviews use of certificates to confirm only Certificate Authorities (CAs) are used
Performs a regular review of algorithms and key lengths in use for protection of sensitive data
Defines roles and responsibilities related to management of encryption keys within the enterprise; define processes for key management
Analyzes and develops policies and solutions to support SSL Certificates/email security on an enterprise scale
Designs, implements and collaborates on a range of information security policies, metrics and performance reports
Assists with project efforts to design security controls and processes that solve business problems
Identifies control deficiencies by analyzing and identifying underlying root causes
Assists stakeholders in identifying, initiating, and tracking corrective actions to address anomalies
Provides input into new security strategies and trends as well as measure and report on the processes that affect the integrity, functionality, and reliability of the bank’s security control framework.
Stays current with information security program developments, industry frameworks, and changes in the Bank that may impact reporting

Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.

At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!

Our Culture Principles

Client Centric

People Focused

Listen Up. Speak Up.

Innovate & Simplify

Own & Execute

Sr. Security Data Engineer & Developer, Security Data Platform