Incident Response Lead Specialist, Vice President

MUFG Bank, Ltd.; Tempe (AZ); Hybrid; USD 126,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Retirement plans

Educational assistance

Paid leave and holidays

Training programs

Job summary

MUFG Bank, Ltd. in Tempe, AZ seeks a seasoned cybersecurity professional to lead incident response, forensics, and threat-hunting across multiple environments. You will analyze threats, coordinate containment, and drive improvements in detection and remediation capabilities.

Responsibilities include real-time security data analysis, developing playbooks, mentoring junior analysts, and ensuring alignment with policies and regulations.

Qualifications

• Bachelor's degree in Computer Science or closely related discipline.
• 8+ years of experience in Cybersecurity Operations or Information Security.
• Experience in Incident Response & Forensics, Security Governance & Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management.
• Familiarity with enterprise detection and response technologies and processes (SIEM, IDS/IPS, EDR, firewalls).
• Experience with CrowdStrike, Proofpoint, O365 security, AWS security, and related tools.

Responsibilities

• Conduct analysis of artifacts to determine intrusion methods and resolution paths while driving security improvements.
• Perform incident response, investigate cybersecurity events, and manage mitigations.
• Analyze security data in real time to spot and thwart threats.
• Perform breach indicator assessments to investigate network traffic for malicious activity.
• Generate reports analyzing activities or trends inside and outside the organization.
• Develop detection playbooks and automate threat detection, monitoring, response, and forensics activities.
• Support compliance inquiries to ensure documentation aligns with policies/regulations.
• Lead and mentor junior analysts as needed.
• Research evolving threats and vulnerabilities to support security efforts.
• Maintain knowledge of security frameworks (ISO 27001, NIST, SOC2, etc.).
• Participate in development of information security policies, standards, and procedures.

Skills

Incident Response

Forensics

Security Governance

Security Risk Management

Network Security

Threat & Vulnerability

MITRE ATT&CK

Education

Bachelor's degree in Computer Science

Tools

CrowdStrike

Tanium

Proofpoint

O365 Security

AWS Security

WAF

SIEM

Open-source IR tools

Job description

Job Summary

In this role you will focus on researching potential cybersecurity threats to various systems, technologies, operations, and programs throughout multiple environments. You will perform analysis based on this research to determine the risk to the organization and take appropriate actions based on that analysis. Responsibilities include rapidly responding to potential incidents and events to minimize risk exposure and ensure the confidentiality, integrity, and availability of assets and business processes. Additionally, you will seek opportunities to strengthen remediation capabilities, reduce response times for incidents, and produce analyses of cybersecurity events that include perspectives on the behavior of adversaries.

Responsibilities

• Conduct analysis of artifacts to determine methods of intrusion and best course of resolution while driving security improvement.
• Perform incident response, investigate potential cybersecurity events, and manage mitigation actions.
• Analyze security data from all systems in real time to spot and thwart potential threats, attacks, and other violations.
• Perform breach indicator assessments to investigate network traffic for malicious activity.
• Generate reports analyzing activities or trends both within and outside of the organization.
• Develop security operations detection playbooks, and automate threat detection, monitoring, response, and forensics activities.
• Support compliance inquiries from IT risk management and auditors to ensure documentation and processes align with policies and regulations.
• Lead and mentor junior analysts as needed.
• Research evolving threats, techniques, tools, and vulnerabilities in support of information security efforts.
• Maintain current knowledge of information security frameworks (ISO 27001, NIST 800 series, FFIEC, SOC2, FedRAMP, STAR, etc.).
• Participate in development of information security policies, standards, and procedures.

Qualifications

• 8+ years of experience in Cybersecurity Operations or Information Security.
• Relevant technical and industry certifications such as CISSP, ISSMP, SANS, GIAC, GCIA, CISM, CEH, GCFA, GCFE, GCIH, or GSEC (preferred).
• Experience in one or more security domains including Incident Response & Forensics, Security Governance & Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management.
• Familiarity with enterprise detection and response technologies and processes (advanced threat detection tools, intrusion detection/prevention systems, network packet analysis, endpoint detection and response, firewalls, anti‑malware/anti‑virus, SIEM tools, etc.).
• Experience with CrowdStrike, Torq, Tanium, Proofpoint, WAF, O365 security, AWS Security, and open‑source incident response and forensic tools.
• Strong analytical, qualitative, and quantitative reasoning skills.
• Understanding of network protocols, operating systems (Windows, Unix, Linux, databases), and mobile device security.
• Knowledge of cloud security, networks, databases, and applications.
• Fundamental understanding of enterprise cybersecurity frameworks (MITRE ATT&CK, Cyber Kill Chain).
• Bachelor’s degree in Computer Science or a closely related discipline, or equivalent combination of formal education and experience.

Benefits

Base pay range: $126,000 – $180,000 depending on location, knowledge, skills, and experience. May also be eligible for discretionary performance‑based bonus and/or incentive compensation. The Total Rewards program provides comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays.

Work Arrangement

Hybrid schedule: four days on‑site at the MUFG office or client sites, and one remote day per week.

Equal Opportunity Employer Statement

MUFG considers all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status protected under applicable law.