[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-sr-security-data-engineer-developer-security-data-platform-mufg-global-service-private-limited-en-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":285,"processed_longitude":286,"processed_employment_types":287,"processed_working_hours":288,"processed_working_hours_labels":290,"processed_home_office":291,"processed_salary_min":282,"processed_salary_max":283,"processed_salary_currency":279,"processed_salary_source":292,"processed_benefits":293,"processed_benefits_labels":294,"processed_industry":295,"processed_skills":7,"processed_job_location":296,"processed_full_address_gmaps":298,"processed_street_gmaps":300,"processed_city_gmaps":301,"processed_postal_code_gmaps":302,"processed_country_gmaps":303,"processed_country_iso_code_gmaps":305,"full_description":17,"formatted_description":306,"processed_employment_types_labels":36,"processed_home_office_labels":34,"processed_industry_labels":38,"processed_it_skills":307,"processed_it_skills_labels":310,"processed_soft_skills":311,"processed_soft_skills_labels":313,"processed_job_expertise_skills":314,"processed_job_expertise_skills_labels":315,"processed_language_requirements":316,"processed_total_experience_years":323,"processed_professional_field":324,"processed_professional_field_labels":326,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":327,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":295,"canonical_industry_label":38,"max_cpc":328,"actual_cpc":7},95732,"sr-security-data-engineer-developer-security-data-platform-mufg-global-service-private-limited","Sr. Security Data Engineer & Developer, Security Data Platform",null,{"name":9,"slug":10,"logo_url":7},"MUFG Global Service Private Limited","mufg-global-service-private-limited",false,true,{"@context":14,"@type":15,"title":16,"description":17,"hiringOrganization":18,"datePosted":20,"validThrough":21,"jobLocation":22,"jobLocationType":34,"employmentType":35,"industry":37,"skills":39,"baseSalary":277},"https:\u002F\u002Fschema.org\u002F","JobPosting","Sr. Security Data Engineer & Developer, Security Data Platform","Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. EDUCATION Degree or equivalent work experience equally preferable Degree in computer science, information security, business, management, cybersecurity, engineering, math, information technology, statistics, operations research, data science, or related field CERTIFICATIONS • Certified Ethical Hacker (CEH) • Certified in Governance, Risk and Compliance (CGRC; formerly Certified Authorization Professional [CAP]) • Certified Information System Auditor (CISA) • Certified Information Systems Manager (CISM) • Certified Information Systems Security Professional (CISSP) • Certified Project Management Professional (CPMP) • GIAC Certified Incident Handler (GCIH) • GIAC Security Essentials Certification (GSEC) • Global Information Assurance Certification (GIAC) • Imperva Database Security Specialist (IDSS) • Microsoft Certified Software Engineer (MCSE) • Offensive Security Certified Professional (OSCP) • Security+ • Six Sigma • SysAdmin, Audit, Network and Security (SANS) WORK EXPERIENCE Strong technical experience in cybersecurity, insider threat, incident response, security operations, or related information security field Experience working in database security, data loss prevention (DLP) engineering, data security engineering, encryption engineering, insider threats, network security, PKI engineering, security analytics, system security, systems and software security (SSS), technical security standards compliance, threat and vulnerability management (TVM), or related field Experience in the banking or finance industries preferred FUNCTIONAL SKILLS Access control conformance, Act independently, Adaptation, Advanced Interactive eXecutive (AIX), Analytical (i.e. technical and non-technical problem-solving), Analytics for decision-making and measurement progress\u002Fperformance, Analyze various methods controlling information security problems, Apache Cassandra, Apache Hadoop, Apache Spark, Apple MAC, Application security, Infrastructure security, Application software which effect the integrity, functionality, and reliability the Bank's network and systems, Application transaction, Apply information security theories and concepts to specific circumstances, Aptitude to lead complex efforts, Architecture diagrams, Articulate security risks and appropriate controls, Automation through scripting and\u002For programming, Amazon Web Services (AWS), Azure, Building and operating a data protection and compliance program, Business processes in the financial\u002Fgovernment sector, Capdo data analytics and draw risk conclusions based on activities seen, CCPA\u002FCPRA, Certificate management tool Venafi, Continuous Integration\u002FContinuous Delivery (CI\u002FCD), CIS-Benchmark, Cloud encryption solutions, Cloud PKI, Cloud technology solutions, COBIT, Common cybersecurity frameworks, Common OS operation, Communicate clearly and concisely with peers and all levels leadership., Communication and presentation, Complex project management, Conceptual processes and system characteristics in the security space, Convey complex concepts to a broad audience (technical and non-technical), Convey technical findings in simple language, Create a level security awareness throughout the Bank for accountability and responsibility, Create native productivity aids and command scripts, Creative problem solving, Cryptographic implementations at media, CVSS, Cybersecurity, DAM, Data analytics and draw risk conclusions based on activities seen, Data classification solutions, Data protection strategies, Databases security configuration, DB2, Demonstrate vulnerabilities, Determine the strengths and weaknesses each method and implement the best cost-justified solution, Development of insider Threat policies and standards, DevSecOps methodologies, Distributed Denial Service (DDoS) Protection, Documentation writing that present both a business and technical viewpoint, Domain Name System (DNS), Drive vulnerability management reporting, Email Security, Encryption Engineer, Encryption security products, Encryption solutions, Entrepreneurial mindset by applying frameworks for resource alignment on goals and objectives, Evaluate application software which impact the integrity, functionality, and reliability of the bank's network and systems, Evaluate business process which impact the integrity, functionality, and reliability of the bank's network and systems, Evaluate the impact to existing security systems, Exabeam, Excel (vlookup\u002Fpivot tables\u002Fcharts), Explain risk, Extranet networks, Facilitate remediation coaching, Federal Financial Institutions Examination Council's (FFIEC), File Transfer Protocol (FTP) functionality, Firewalls, Formal stand-up presentations to all levels management, GLBA, Gramm-Leach-Bliley Act (GLBA), Hyper Text Transfer Protocol\u002FSecure (HTTP\u002FHTTPs), Identify weak links in information security products, Implement the best cost-justified solution, Implementation of insider Threat policies and standards, Industry trends and current security practices, Influence and communicate cross-functionally all levels management., Information security theories and concepts to specific circumstances, Insider risk management governance, Internet, Internet Relay Chat (IRC), Interpersonal communication, Intrusion Detection System (IDS), ISO 27001, Lead pro-active reviews and self-assessments the policies, Liaise business, Linux, Listener, Log management solutions, Mac, Maintenance of insider Threat policies and standards, Major database platforms, Manage and lead teams multiple individuals, Manage application and infrastructure security assessments, Manage complex projects, Manage information security control assessments, Managing initiatives such as assessments, Mechanics of OS exploits of preventive and detective controls, Methods of controlling information security problems, Microsoft SQL, Mitigate the control deficiencies, Mitigations changes and risks, MITRE ATT&CK framework, Modern security principles and its practical applications., MongoDB, MSSQL, Multifactor Authentication (MFA), MySQL, National Institute of Standards (NIST), Network, Network appliances, Network security, Network traffic analysis, Network\u002Fsystem forensic tools, Networking fundamentals (e.g. TCP\u002FIP) and troubleshooting ., NIST CSF, NIST framework, Nnative productivity aids and command scripts., NoSQL, O365, Operating in hybrid-cloud environment, Operating system (OS) internals, Operating system changes evaluate the impact to existing security systems, Operating systems and their versions and security systems in use at the Bank, Operating systems security configuration, Operational auditing in the financial\u002Fgovernment sector, Oracle, Oracle TDE, Oral communications, Organize and establish processes in need of improvement, Outstanding oral and written communications, Oversee workloads and support direct reports to success while meeting objectives senior management, OWASP, Passionate, PCI, Perimeter Network Security, Perl, Positive and driven attitude, PowerShell, Prepare detailed task plans outlining all requirements to complete the given assignment, Presentation, Prioritizing and organizing day to day tasks and needs as appropriate, Proactive mindset and actions, Procedures and systems, Program management, Programming language to automate tasks, Protection and monitoring, Provide leadership and guidance to IT teams in patching and solutions to mitigate security threats, Provide technical direction to other peer staff members, Proxy, Public Key Infrastructure (PKI), Python, Qualys, Rapid7, RegEx, Regulatory and risk partners to satisfy legal and regulatory requirements and avoid risk, Regulatory compliance, Regulatory requirements affecting data integrity, Reliable team management, Report creation, Risk assessments, Router & switches, Ruby, Safenet, Scripting languages, Security analytics toolsets, Security and IT metrics, Security event management tools, Security Information and Event Management (SIEM), Security risks and controls, Security tool sets, Servant leadership showing strength, Set direction, SIEM, SIEM\u002FSOAR management solutions, Software development lifecycle, Software Security (SSS) Specific, Solaris, SOX, Splunk, Splunk Search Language, SQLSERVER, Strategic and operational initiatives, Strategic program development and improvement following current industry security trends and patterns and in alignment business vision and needs, Strengths and weaknesses of each method and implement the best cost-justified solution., Support audit, Support databases, Support MS certificate authority services, Symantec\u002FDLP, Syslog-NG, System security, System vulnerabilities, Technical and non-technical problem-solving, Technical direction to other peer staff members, Technical Security Standards Compliance Specific, Techniques and procedures (TTPs) used by threat actors against endpoints, Technology and leadership partners, Thales, The mechanics OS exploits preventive and detective controls, Threat and vulnerability management (TVM) & Systems, Threat detection, Tooling integrations to support Agile, Tools used to execute a world class offensive Security program, Tools used to execute a world class Perimeter Network Security program, Train new staff on the security team, Transmission Control Protocol\u002FInternet Protocol (TCP\u002FIP), UEBA and related tools, Understand security risks and controls, Unix, Various methods of controlling information security problems, Verbal communication, Visionary, Voltage, Vormetric, Vulnerability scanning tools, Web Application Firewall (WAF), Windows servers and workstations, Wireless Local Area Network (WLAN) Security, Working centralized logging tools, Workload prioritization and organization, Written communication FOUNDATIONAL SKILLS Exceptional team member who will drive innovation while never losing site of the basics - Exceptional ability to execute and drive change - Strong drive to build a best in the world program - Strategic, creative, and innovative mind - Zero tolerance for operational, design, and strategy oriented gaps - Absolute self-starter who will take the lead and initiative to find and solve problems - Be able to communicate many examples of where you drove positive change RESPONSIBILITIES • Designing, developing, testing, documenting, monitoring, and implementing information and database security solutions to enforce security strategies and support to new\u002Fexisting systems in accordance with policies, standards, guidelines and procedures. • Serve as a trusted partner to business, operations, development, risk and compliance teams providing database security subject matter expert (SME) guidance and analysis. • Managing a database activity monitoring (DAM) platform for security and audit compliance, including policy creation, event and trend analysis, performance monitoring and infrastructure maintenance. • Developing and maintaining database security standards, guidelines and procedures for hardening database configurations, users and roles, profiles, etc. • Refining and enhancing existing controls, policies, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of data. • Evaluating updates to new\u002Fexisting database security controls by determining the strengths\u002Fweaknesses and coordinate the testing and implementation of the new\u002Fenhanced controls with all business partners that are affected. • Identifying weak links in information security products and determine how to mitigate the control deficiencies. • Enhancing preventive systems used to stop and\u002For deter security breaches. • Evaluating database security patches from vendors and assesses potential risk and work with stakeholders to address vulnerabilities. • Respond to security Incidents and assist with Tier-1 and Tier-2 incident investigations. • Performing root cause analysis of security violations to determine if they are the result of misconfiguration or malfunction or if they are malicious, and taking appropriate action depending on circumstances. • Evaluating new database releases\u002Fupdates to ensure they are appropriately integrated into the security program and existing controls are effective with the updates. • Working with database custodians at different levels of the organization to understand their respective security needs and assist with implementing practices and procedures consistent with the bank information security policy. • Conducting and identifying database security compliance issues and ensure that any non-compliance to security baseline configurations are identified, tracked and assigned to stakeholders for remediation. • Working with internal and external auditors to demonstrate and provide evidence of security controls are adherence to regulatory compliance. • Executing and enhancing monitoring systems used to detect and report security violations. • Administering the DLP system and policies to enforce on endpoint sensors and refining DLP security standards • Developing actionable detections for latest data leakage methods • Developing and maintaining the security guidelines and procedures for DLP • Evaluating and enhancing new\u002Fexisting security controls to ensure relevance and effectiveness. • Creating and managing process for identifying, prioritizing and remediating security gaps and weakness. • Conducting analyzing and following up with key stakeholders for forensic investigation and remediation. • Investigating DLP incidents to reduce the risk imposed to the Bank. • Providing configurations and process enhancement proposals supported by Use Case scenarios. • Developing regular data leakage trending and performance metrics on DLP activities. • Working with vendors on providing product updates, bug fixes and managing relations.• Provide administration and operationally support adopted endpoint security technology covering EDR (Endpoint Detection and Response) and Next-Gen Anti-virus solution. • Execute entire change and release management process for deployments, enhancements, upgrades, and hotfixes across all feature sets to include communications, planning, testing, deployment, and monitoring. • Provide Subject Matter Expertise and demonstrate in-depth understanding of the TTPs (Tactics, Techniques and Procedures) used by threat actors against endpoints. Leverage EDR, Next-Gen AV and other security controls to protect systems against internal and external threats. • Closely work with Security operations center and other security groups during investigation of any security breach. • Be able to triage security logs, recommend containment controls and lead remediation steps. • Demonstrate mastery in log file analysis, fault isolation and diagnostic\u002Fassessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions. • Stay current on endpoint security best practices, active threats and mitigation strategies. • Drive continuous innovation with new ideas on improving and maturing endpoint security posture. • Maintain metrics and supporting analytics on System and endpoint Security. • Design, build, operate and maintain network security infrastructure (e.g. Firewalls, VPNs) with focus on AWS Cloud Services. • Assess risk and implement solutions. • Respond and resolve production issues. • Develop network security controls and standards. • Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise. • Documentation of control states and performing gap analysis • Design, review and improve process flows • Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies • Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering • Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise. • Documentation of control states and performing gap analysis • Design, review and improve process flows • Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies • Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering • Inspects outbound traffic to prevent traffic from specific computers and filtering to prevent sensitive data leakage • Enforces security policies which move data between networks using secure, authenticated, and encrypted mechanisms • Performs an assessment of data to identify sensitive information that requires the application of encryption and integrity controls • Deploys approved hard drive encryption software to mobile devices and systems that hold sensitive data • Verifies that cryptographic devices and software are configured to use publicly vetted algorithms • Regularly reviews use of certificates to confirm only Certificate Authorities (CAs) are used • Performs a regular review of algorithms and key lengths in use for protection of sensitive data • Defines roles and responsibilities related to management of encryption keys within the enterprise; define processes for key management • Analyzes and develops policies and solutions to support SSL Certificates\u002Femail security on an enterprise scale • Designs, implements and collaborates on a range of information security policies, metrics and performance reports • Assists with project efforts to design security controls and processes that solve business problems • Identifies control deficiencies by analyzing and identifying underlying root causes • Assists stakeholders in identifying, initiating, and tracking corrective actions to address anomalies • Provides input into new security strategies and trends as well as measure and report on the processes that affect the integrity, functionality, and reliability of the bank’s security control framework. • Stays current with information security program developments, industry frameworks, and changes in the Bank that may impact reporting Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender. At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them! Our Culture Principles Client Centric People Focused Listen Up. Speak Up. Innovate & Simplify Own & Execute",{"@type":19,"name":9},"Organization","2026-09-24","2027-09-24",[23],{"@type":24,"address":25,"geo":30},"Place",{"@type":26,"addressLocality":27,"addressCountry":28,"addressRegion":29},"PostalAddress","Bangalore","IN","Karnataka",{"@type":31,"latitude":32,"longitude":33},"GeoCoordinates",12.9628957,77.57754,"ONSITE",[36],"PERMANENT",[38],"Financial Services",[40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,69,134,71,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,121,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,94,223,96,97,98,99,92,101,100,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276],"Python","SQL","Excel","PowerShell","Perl","Ruby","Splunk","Splunk Search Language","Apache Spark","Apache Hadoop","Apache Cassandra","MongoDB","MySQL","Microsoft SQL","Oracle","DB2","AWS","Azure","Linux","Unix","Windows","Mac","SIEM","DLP","EDR","Firewalls","VPN","PKI","Encryption","Network Security","Vulnerability Management","Security Analytics","Scripting","CI\u002FCD","DevSecOps","RegEx","TCP\u002FIP","DNS","HTTP\u002FHTTPS","FTP","WAF","IDS","Qualys","Rapid7","Exabeam","Venafi","Safenet","Thales","Voltage","Vormetric","Symantec DLP","O365","MITRE ATT&CK","NIST","ISO 27001","PCI","SOX","GLBA","FFIEC","COBIT","CVSS","OWASP","AIX","Solaris","Communication","Presentation","Interpersonal Skills","Teamwork","Analytical Thinking","Problem Solving","Creative Problem Solving","Leadership","Influence","Adaptability","Proactive Attitude","Self-Starter","Organizational Skills","Prioritization","Written Communication","Verbal Communication","Cross-functional Collaboration","Mentoring","Team Management","Strategic Thinking","Innovation","Attention to Detail","Cybersecurity","Insider Threat","Incident Response","Security Operations","Database Security","Data Loss Prevention","Data Security Engineering","Encryption Engineering","PKI Engineering","System Security","Systems and Software Security","Technical Security Standards Compliance","Threat and Vulnerability Management","Access Control","Application Security","Infrastructure Security","Cloud Security","Risk Assessment","Regulatory Compliance","Security Policies","Security Standards","Security Procedures","Security Guidelines","Security Controls","Security Architecture","Security Awareness","Project Management","Program Management","Vulnerability Scanning","Penetration Testing","Forensics","Root Cause Analysis","Log Analysis","Security Metrics","Data Classification","Data Protection","Key Management","Certificate Management","Endpoint Security","Network Security Infrastructure","Firewall Management","VPN Management","Email Security","Web Security","Security Incident Management","Threat Detection","Threat Intelligence","Security Monitoring","Security Auditing","Compliance Auditing","IT General Controls","Change Management","Release Management","Vendor Management","Stakeholder Management","Business Process Analysis","Gap Analysis","Process Improvement","Documentation","Training","Team Leadership","Strategic Planning","Innovation Management","Security Program Development","Security Strategy","Security Governance","Risk Management","Compliance Management","Data Analytics","Security Information and Event Management","Security Orchestration, Automation, and Response","User and Entity Behavior Analytics","Database Activity Monitoring","Data Loss Prevention Engineering","Endpoint Detection and Response","Next-Gen Anti-virus","Cloud PKI","Cloud Encryption","Cryptographic Implementations","Secure Sockets Layer","Transport Layer Security","Public Key Infrastructure","Certificate Authority","Hard Drive Encryption","Data Leakage Prevention","Content Filtering","Web Filtering","Email Filtering","Network Traffic Analysis","Packet Analysis","Intrusion Detection","Intrusion Prevention","Security Testing","Vulnerability Assessment","Penetration Testing Tools","Security Frameworks","NIST Cybersecurity Framework","PCI DSS","CIS Benchmarks","Security Best Practices","Industry Trends","Regulatory Requirements","Legal Requirements","Risk Partners","Audit Support","Compliance Support","Security Metrics and Reporting","Security Program Management","Security Project Management","Security Team Management","Security Training","Security Awareness Training","Security Policy Development","Security Standards Development","Security Procedure Development","Security Guideline Development","Security Control Assessment","Security Control Implementation","Security Control Testing","Security Control Monitoring","Security Control Maintenance","Security Control Enhancement","Security Control Evaluation","Security Control Design","Security Control Documentation","Security Control Gap Analysis","Security Control Remediation","Security Control Compliance","Security Control Auditing","Security Control Reporting","Security Control Metrics","Security Control Analytics","Security Control Automation","Security Control Orchestration","Security Control Integration","Security Control Optimization","Security Control Innovation","Security Control Strategy","Security Control Governance","Security Control Risk Management","Security Control Compliance Management","Security Control Program Management","Security Control Project Management","Security Control Team Management","Security Control Leadership","Security Control Mentoring","Security Control Training","Security Control Communication","Security Control Presentation","Security Control Analysis","Security Control Deployment",{"@type":278,"currency":279,"value":280},"MonetaryAmount","INR",{"@type":281,"minValue":282,"maxValue":283,"unitText":284},"QuantitativeValue",12000000,20000000,"YEAR",[32],[33],"permanent",[289],"FULL_TIME",[289],"onsite","estimated",[],[],"financial services",[297],"mufg, bcit bengaluru office (mgs), india",[299],"Bangalore, Karnataka, Indien",[],[27],[],[304],"Indien",[28],"Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.\n\n## EDUCATION\n\nDegree or equivalent work experience equally preferable\n\nDegree in computer science, information security, business, management, cybersecurity, engineering, math, information technology, statistics, operations research, data science, or related field\n\n## CERTIFICATIONS\n\n- Certified Ethical Hacker (CEH)\n- Certified in Governance, Risk and Compliance (CGRC; formerly Certified Authorization Professional [CAP])\n- Certified Information System Auditor (CISA)\n- Certified Information Systems Manager (CISM)\n- Certified Information Systems Security Professional (CISSP)\n- Certified Project Management Professional (CPMP)\n- GIAC Certified Incident Handler (GCIH)\n- GIAC Security Essentials Certification (GSEC)\n- Global Information Assurance Certification (GIAC)\n- Imperva Database Security Specialist (IDSS)\n- Microsoft Certified Software Engineer (MCSE)\n- Offensive Security Certified Professional (OSCP)\n- Security+\n- Six Sigma\n- SysAdmin, Audit, Network and Security (SANS)\n\n## WORK EXPERIENCE\n\nStrong technical experience in cybersecurity, insider threat, incident response, security operations, or related information security field\n\nExperience working in database security, data loss prevention (DLP) engineering, data security engineering, encryption engineering, insider threats, network security, PKI engineering, security analytics, system security, systems and software security (SSS), technical security standards compliance, threat and vulnerability management (TVM), or related field\n\nExperience in the banking or finance industries preferred\n\n## FUNCTIONAL SKILLS\n\n\n## FOUNDATIONAL SKILLS\n\nExceptional team member who will drive innovation while never losing site of the basics - Exceptional ability to execute and drive change - Strong drive to build a best in the world program - Strategic, creative, and innovative mind - Zero tolerance for operational, design, and strategy oriented gaps - Absolute self-starter who will take the lead and initiative to find and solve problems - Be able to communicate many examples of where you drove positive change\n\n## RESPONSIBILITIES\n\n- Designing, developing, testing, documenting, monitoring, and implementing information and database security solutions to enforce security strategies and support to new\u002Fexisting systems in accordance with policies, standards, guidelines and procedures.\n- Serve as a trusted partner to business, operations, development, risk and compliance teams providing database security subject matter expert (SME) guidance and analysis.\n- Managing a database activity monitoring (DAM) platform for security and audit compliance, including policy creation, event and trend analysis, performance monitoring and infrastructure maintenance.\n- Developing and maintaining database security standards, guidelines and procedures for hardening database configurations, users and roles, profiles, etc.\n- Refining and enhancing existing controls, policies, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of data.\n- Evaluating updates to new\u002Fexisting database security controls by determining the strengths\u002Fweaknesses and coordinate the testing and implementation of the new\u002Fenhanced controls with all business partners that are affected.\n- Identifying weak links in information security products and determine how to mitigate the control deficiencies.\n- Enhancing preventive systems used to stop and\u002For deter security breaches.\n- Evaluating database security patches from vendors and assesses potential risk and work with stakeholders to address vulnerabilities.\n- Respond to security Incidents and assist with Tier-1 and Tier-2 incident investigations.\n- Performing root cause analysis of security violations to determine if they are the result of misconfiguration or malfunction or if they are malicious, and taking appropriate action depending on circumstances.\n- Evaluating new database releases\u002Fupdates to ensure they are appropriately integrated into the security program and existing controls are effective with the updates.\n- Working with database custodians at different levels of the organization to understand their respective security needs and assist with implementing practices and procedures consistent with the bank information security policy.\n- Conducting and identifying database security compliance issues and ensure that any non-compliance to security baseline configurations are identified, tracked and assigned to stakeholders for remediation.\n- Working with internal and external auditors to demonstrate and provide evidence of security controls are adherence to regulatory compliance.\n- Executing and enhancing monitoring systems used to detect and report security violations.\n- Administering the DLP system and policies to enforce on endpoint sensors and refining DLP security standards\n- Developing actionable detections for latest data leakage methods\n- Developing and maintaining the security guidelines and procedures for DLP\n- Evaluating and enhancing new\u002Fexisting security controls to ensure relevance and effectiveness.\n- Creating and managing process for identifying, prioritizing and remediating security gaps and weakness.\n- Conducting analyzing and following up with key stakeholders for forensic investigation and remediation.\n- Investigating DLP incidents to reduce the risk imposed to the Bank.\n- Providing configurations and process enhancement proposals supported by Use Case scenarios.\n- Developing regular data leakage trending and performance metrics on DLP activities.\n- Working with vendors on providing product updates, bug fixes and managing relations.\n- Provide administration and operationally support adopted endpoint security technology covering EDR (Endpoint Detection and Response) and Next-Gen Anti-virus solution.\n- Execute entire change and release management process for deployments, enhancements, upgrades, and hotfixes across all feature sets to include communications, planning, testing, deployment, and monitoring.\n- Provide Subject Matter Expertise and demonstrate in-depth understanding of the TTPs (Tactics, Techniques and Procedures) used by threat actors against endpoints. Leverage EDR, Next-Gen AV and other security controls to protect systems against internal and external threats.\n- Closely work with Security operations center and other security groups during investigation of any security breach.\n- Be able to triage security logs, recommend containment controls and lead remediation steps.\n- Demonstrate mastery in log file analysis, fault isolation and diagnostic\u002Fassessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions.\n- Stay current on endpoint security best practices, active threats and mitigation strategies.\n- Drive continuous innovation with new ideas on improving and maturing endpoint security posture.\n- Maintain metrics and supporting analytics on System and endpoint Security.\n- Design, build, operate and maintain network security infrastructure (e.g. Firewalls, VPNs) with focus on AWS Cloud Services.\n- Assess risk and implement solutions.\n- Respond and resolve production issues.\n- Develop network security controls and standards.\n- Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise.\n- Documentation of control states and performing gap analysis\n- Design, review and improve process flows\n- Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies\n- Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering\n- Collaborate with various teams in the bank to successfully develop critical security controls across the enterprise.\n- Documentation of control states and performing gap analysis\n- Design, review and improve process flows\n- Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies\n- Works with 2nd line to enforce security and acceptable use polices through web, email, and other content filtering\n- Inspects outbound traffic to prevent traffic from specific computers and filtering to prevent sensitive data leakage\n- Enforces security policies which move data between networks using secure, authenticated, and encrypted mechanisms\n- Performs an assessment of data to identify sensitive information that requires the application of encryption and integrity controls\n- Deploys approved hard drive encryption software to mobile devices and systems that hold sensitive data\n- Verifies that cryptographic devices and software are configured to use publicly vetted algorithms\n- Regularly reviews use of certificates to confirm only Certificate Authorities (CAs) are used\n- Performs a regular review of algorithms and key lengths in use for protection of sensitive data\n- Defines roles and responsibilities related to management of encryption keys within the enterprise; define processes for key management\n- Analyzes and develops policies and solutions to support SSL Certificates\u002Femail security on an enterprise scale\n- Designs, implements and collaborates on a range of information security policies, metrics and performance reports\n- Assists with project efforts to design security controls and processes that solve business problems\n- Identifies control deficiencies by analyzing and identifying underlying root causes\n- Assists stakeholders in identifying, initiating, and tracking corrective actions to address anomalies\n- Provides input into new security strategies and trends as well as measure and report on the processes that affect the integrity, functionality, and reliability of the bank’s security control framework.\n- Stays current with information security program developments, industry frameworks, and changes in the Bank that may impact reporting\n\nMitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.\n\nAt MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!\n\nOur Culture Principles\n\nClient Centric\n\nPeople Focused\n\nListen Up. Speak Up.\n\nInnovate & Simplify\n\nOwn & Execute",{"aix":308,"aws":309,"db2":308,"dlp":309,"dns":308,"edr":309,"ftp":308,"ids":308,"mac":308,"pci":308,"pki":309,"sox":308,"sql":309,"vpn":309,"waf":308,"cvss":308,"glba":308,"nist":309,"o365":308,"perl":308,"ruby":308,"siem":309,"unix":309,"azure":308,"ci\u002Fcd":308,"cobit":308,"excel":308,"ffiec":308,"linux":309,"mysql":308,"owasp":308,"regex":308,"oracle":309,"python":309,"qualys":308,"rapid7":308,"splunk":309,"tcp\u002Fip":309,"thales":308,"venafi":308,"exabeam":308,"mongodb":308,"safenet":308,"solaris":308,"voltage":308,"windows":309,"devsecops":308,"firewalls":309,"iso 27001":308,"scripting":309,"vormetric":308,"encryption":309,"http\u002Fhttps":308,"powershell":308,"apache spark":308,"mitre att&ck":309,"symantec dlp":308,"apache hadoop":308,"microsoft sql":309,"apache cassandra":308,"network security":309,"security analytics":309,"splunk search language":309,"vulnerability management":309},2,3,[40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103],{"communication":312,"presentation":309,"interpersonal skills":309,"teamwork":312,"analytical thinking":312,"problem solving":312,"creative problem solving":309,"leadership":312,"influence":309,"adaptability":309,"proactive attitude":309,"self-starter":309,"organizational skills":309,"prioritization":309,"written communication":312,"verbal communication":312,"cross-functional collaboration":309,"mentoring":309,"team management":309,"strategic thinking":309,"innovation":309,"attention to detail":309},4,[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125],{"sox":308,"cvss":308,"glba":308,"cobit":308,"ffiec":308,"owasp":308,"pci dss":308,"training":309,"cloud pki":309,"forensics":309,"iso 27001":308,"mentoring":309,"gap analysis":309,"log analysis":309,"mitre att&ck":309,"web security":309,"audit support":309,"cybersecurity":312,"documentation":309,"risk partners":309,"web filtering":309,"access control":309,"cis benchmarks":308,"cloud security":309,"data analytics":309,"email security":309,"insider threat":309,"key management":309,"vpn management":309,"data protection":309,"email filtering":309,"industry trends":309,"packet analysis":309,"pki engineering":309,"risk assessment":309,"risk management":309,"system security":309,"team leadership":309,"cloud encryption":309,"network security":309,"security metrics":309,"security testing":309,"threat detection":309,"change management":309,"content filtering":309,"database security":312,"endpoint security":309,"incident response":309,"security auditing":309,"security controls":309,"security policies":309,"security strategy":309,"security training":309,"vendor management":309,"compliance support":309,"legal requirements":309,"program management":309,"project management":309,"release management":309,"security analytics":309,"security awareness":309,"security standards":309,"strategic planning":309,"compliance auditing":309,"data classification":309,"firewall management":309,"intrusion detection":309,"it general controls":309,"next-gen anti-virus":309,"penetration testing":308,"process improvement":309,"root cause analysis":309,"security frameworks":309,"security governance":309,"security guidelines":309,"security monitoring":309,"security operations":309,"security procedures":309,"threat intelligence":309,"application security":309,"data loss prevention":312,"intrusion prevention":309,"secure sockets layer":309,"certificate authority":309,"compliance management":309,"hard drive encryption":309,"innovation management":309,"regulatory compliance":309,"security architecture":309,"certificate management":309,"encryption engineering":309,"stakeholder management":309,"vulnerability scanning":309,"data leakage prevention":309,"infrastructure security":309,"regulatory requirements":309,"security best practices":309,"security control design":309,"network traffic analysis":309,"security control metrics":309,"security control testing":309,"security team management":309,"transport layer security":309,"vulnerability assessment":309,"business process analysis":309,"data security engineering":312,"penetration testing tools":308,"public key infrastructure":309,"security control analysis":309,"security control auditing":309,"security control strategy":309,"security control training":309,"security control analytics":309,"security control mentoring":309,"security control reporting":309,"security awareness training":309,"security control assessment":309,"security control automation":309,"security control compliance":309,"security control deployment":309,"security control evaluation":309,"security control governance":309,"security control innovation":309,"security control leadership":309,"security control monitoring":309,"security policy development":309,"security program management":309,"security project management":309,"database activity monitoring":309,"nist cybersecurity framework":309,"security control enhancement":309,"security control integration":309,"security control maintenance":309,"security control remediation":309,"security incident management":309,"security program development":309,"cryptographic implementations":309,"security control gap analysis":309,"security control optimization":309,"security control presentation":309,"systems and software security":309,"security control communication":309,"security control documentation":309,"security control orchestration":309,"security guideline development":309,"security metrics and reporting":309,"security procedure development":309,"security standards development":309,"endpoint detection and response":309,"network security infrastructure":309,"security control implementation":309,"data loss prevention engineering":309,"security control risk management":309,"security control team management":309,"user and entity behavior analytics":309,"security control program management":309,"security control project management":309,"threat and vulnerability management":309,"security control compliance management":309,"technical security standards compliance":309,"security information and event management":309,"security orchestration, automation, and response":309},[126,127,128,129,130,131,132,133,69,134,71,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,121,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,94,223,96,97,98,99,92,101,100,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276],{"detected_language_jobad":317,"required":318},"en",[319],[320],{"language":321,"level":322},"ENGLISH","C1",5,[325],"Information and Communications Technology",[325],"https:\u002F\u002Fmufgub.wd3.myworkdayjobs.com\u002Fen-us\u002Fmufg-careers\u002Fjob\u002Fmufg-global-service-private-ltd---bengaluru-bcit\u002Fsr-security-data-engineer---developer--security-data-platform_10078171-wd-1",1]