Senior Information Security Engineer, AVP

Mufgamericas; Tempe (AZ); Hybrid; USD 110,000 - 142,000; Full time

Job summary

Join a forward-thinking financial group as a Senior Information Security Engineer. In this pivotal role, you will lead risk assessments, identify security gaps, and collaborate on innovative security solutions. With a strong focus on Active Directory and cloud services, you'll ensure the integrity of systems within a dynamic environment. This role offers the opportunity to make a meaningful impact, working alongside a diverse team dedicated to fostering a culture of trust and innovation. If you're passionate about cybersecurity and want to contribute to a safer financial landscape, this is the perfect opportunity for you.

Benefits

Comprehensive health benefits

Retirement plans

Educational assistance

Paid vacation

Sick days

Paid parental leave

Qualifications

• 5+ years in cybersecurity assessment or IT audit.
• Expertise in Active Directory and cloud services.
• Hands-on experience with security architecture.

Responsibilities

• Conduct technical risk assessments and identify security gaps.
• Develop guidelines for information security controls.
• Produce documentation of assessments and threat analysis.

Skills

Active Directory Security

Cybersecurity Assessment

Network Security Design

Vulnerability Management

Cloud Security

Scripting Languages (Python, Java)

Education

Degree in Computer Science

Tools

SIEM

Firewall Architecture

DLP

Job description

Senior Information Security Engineer, AVP page is loaded

Senior Information Security Engineer, AVP

Apply locations Tampa, FL Jersey City, NJ Tempe, AZ time type Full time posted on Posted Today job requisition id 10070274-WD

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Overview:

Searching an Sr. Information Security Engineer with the ability to perform technical risk assessments and synthesize observations at a macro level, identifying indicators of changing risk and/or symptoms of process or control deficiencies, ability to identify and propose process and technology controls in dynamic environments, and with in-depth knowledge of applying network switching, TCP/IP, IP Addressing and Routing, WAN Technologies, Operating and Configuring networked Devices, and Managing Network Environments.

Responsibilities:

• Co-Develop guidelines for the usage, control, maintenance and audit-readiness of information and computer resources that are used in the distributed processing environment.

• Analyze and address security gaps for technologies within the Bank’s infrastructure

• Identify distributed systems security issues as they arise and coordinate with the technology owners to ensure that issues are addressed and resolved in a timely basis.

• Execute technical risk assessment activities for scoped environments

• Perform reporting of findings, issue resolution and management of findings

• Support FLOD/SLOD assessments, audits and external exams

• Provide effective, accurate and timely reporting

• Perform Information Security remote/table-top assessments

• Identify high risks find and lead risk findings to resolution

• Identify control deficiencies by analyzing and identify underlying root causes

• Designing, implementing, and collaborating on a range of information security metrics and performance reports

• Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies

• Analyzing control results in an objective and quantifiable manner

• Produce detailed documentation of assessments and perform threat analysis of gaps identified

• Communicate vendor information security issues to stakeholders, ensuring their understanding of associated risks and actions needed to remediate those risks

• Validate evidence from vendors, before remediation plans are closed

Requirements:

• Expertise in AD security features like Group Policy, access control lists (ACLs), and security groups.

• Specialize Knowledge of Active directory monitoring including user account activity, authentication events, and security configuration changes.

• Expertise level knowledge into AD Federation Services (AD FS), Windows Server Active Directory Certificate Services (AD CS), and Azure Active Directory (Azure AD).

• 5 years’ experience in cybersecurity assessment activities or IT audit, penetration testing, and/or vulnerability management

• 5 years Prior information technology (IT) experience in mid or large-scale companies

• Experience with one or more of the following control areas:

  • Active Directory

  • Vulnerability Management

  • Configuration Management

  • Cloud services

• Experience in performing information security assessments; provide information security

• guidance to business stakeholders; interpreting and applying information security policy and standards

• Technical knowledge and hands on experience with security and networking architecture, network security design, routers, wireless security, intrusion prevention/detection, firewall architecture, SIEM, DLP, and encryption

• Knowledge and prior experience with operating systems internals (Linux, Windows), network protocols and technologies, web services, databases, scripting, and programming languages (C/C++, Java, Perl, Python, Assembly)

• Proficient working knowledge within the following risk domains/technologies:

  • Database and application security

  • Firewall technologies
    • Network Architecture
    • Database/Application/Network Layer Secure Protocols
    • Change Management
    • Vulnerability Management
    • System Configuration Management
    • Cloud Configuration Management

Certifications:

• Certified Information Systems Security Professional (CISSP)

• Global Information Assurance

• Certification (GIAC)

• Certified Information Systems Auditor (CISA)

• Certified in Risk and Information Systems Control (CRISC)

• Certified Information Security Manager (CISM), Certified

• Information Systems Security Professional (CISSP), or other security certifications desired

Education:

• Degree in Computer Science or related professional experience

Other Qualifications:

As per MUFG’s work policy, must work onsite 4 days and 1 day remotely out of either Tampa, FL (Preference), Tempe, AZ, or Jersey City, NJ office.

The typical base pay range for this role is between $110K - $142K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.

MUFG Benefits Summary

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.

Similar Jobs (5)

Senior Information Security Engineer

locations Tampa, FL time type Full time posted on Posted 30+ Days Ago

Sr. Network Security Engineer, Vice President

locations 2 Locations time type Full time posted on Posted 30+ Days Ago

Sr. Cloud Security Engineer - VP

locations 3 Locations time type Full time posted on Posted 28 Days Ago

At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!