Lead Network Security Engineer – Cloud & Incident Response

Mitsubishi UFJ Trust and Banking Corporation, New York Branch; New York (NY); On-site; USD 125,000 - 140,000; Full time

Job summary

Mitsubishi UFJ Trust and Banking Corporation New York Branch is seeking a Senior Network Security Engineer to oversee security operations and incident response in production environments.

You will review CSOC alerts, coordinate with infrastructure teams, deploy firewall rules, and support audit requirements while strengthening our security posture in a fast‑paced financial services setting.

Qualifications

• 6-8 years hands-on experience with public cloud platforms (AWS/Azure) in production environments.
• Ability to resolve security alerts in a timely manner and elevate events that could lead to a breach.
• Work with various teams (application, infrastructure, identity management, etc.) to troubleshoot & resolve alerts.
• Follow run books for deployments and/or system upgrades during and off-hours.
• Working knowledge of security protocols, authentication, authorization and security.

Responsibilities

• Manage Network Security Engineers to ensure processes around network security are managed well and responded in a timely manner.
• Review and respond to alerts generated by the Cyber Security Operations Center (CSOC) teams.
• Review, respond and resolve alerts originating from Carbon Black products to ensure appropriate system processing and application requirements are met in a timely manner.
• Ensure Microsoft Defender and McAfee alerts are monitored and resolved promptly.
• Assist in the deployment of standard firewall rules to meet technical or business requirements.
• Support the network security VP/Engineers to gather evidence for audit requirements.
• Implement appropriate changes, updates, and upgrades in response to vulnerabilities and incursions.
• Assist process owners for TVM and SIEM by actively participating in RCSAs and other risk assessments targeting these processes.
• Provide day‑to‑day support of network security systems on an as‑needed basis as required by management.
• Participate in metric collection to demonstrate situational awareness to management regarding current threats and risks.

Skills

Public cloud platforms (AWS/Azure)

Security alerts management

Firewall rule deployment

Run books adherence

Collaboration with teams

Security protocols knowledge

Analytical troubleshooting

Identity management collaboration

Job description

• Manage Network Security Engineers to ensure processes around network security are managed well and responded in a timely manner.

• Review and respond to alerts generated by the Cyber Security Operations Center (CSOC) teams.

• Review, respond and resolve alerts originating Carbon Black products to ensure appropriate system processing and applications requirements are met in a timely manner.

• Ensure Microsoft Defender/McAfee alerts are monitored and resolved in a timely manner.

• Assist deploy standard firewall rules to meet technical or business requirements.

• Support network security VP/Engineers to gather evidence for audit requirements

• Implement appropriate changes, updates, and upgrades in response to vulnerabilities and incursions.

• Assist process owner(s) for TVM and SIEM by actively participating in RCSAs and other risk assessments targeting these processes.

• Provide day-to-day support of network security systems on as-needed basis as required by management

• Participate in metric collection to demonstrate situational awareness to management regarding current threats and risks.

• Based on changes in the business work environment, job responsibilities can change and removed accordingly. Additionally, this position will perform other duties as required, and participate in special projects as deemed necessary and appropriate by Management.

Experience: 6-8 years of hands-on experience with public cloud platforms (AWS/Azure) in production environments.

• Manage and coordinate security alerts from various sources including CSOC, Carbon Black Products, MS Defender, McAfee and/or other sources.

• Ability to resolve security alerts in a timely manner and escalate events that could lead to breach.

• Analytical skills to troubleshoot events and correlate user or system activity.

• Work with various teams (application, infrastructure, identity management, etc.) to troubleshoot & resolve alerts.

• Ability to deploy firewall rules to meet business and/or technical requirements.

• Follow run books for deployments and/or system upgrades during and off-hours.

• Working knowledge of security protocols, authentication, authorization and security.

The typical base pay range for this role is between $125K - $140K depending on job-related knowledge, skills, experience and location. Additionally, our Employee Benefit Program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, 401(k) retirement and savings plan, educational assistance and training programs, paid maternity and parental bonding leave, and paid vacation, sick leave, and holidays.

Mitsubishi UFJ Trust and Banking Corporation New York Branch ("MUTB-NY") is an Equal Employment Opportunity Employer.

If you are interested in applying, please provide your resume to: [e-mail].