Cyber Security Engineer - Assistant Vice President

Cyber Security Engineer - Assistant Vice President

Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures.

• Develop and maintain threat models for Mizuho information assets and services.
• Assess and recommend security controls during design and implementation of new projects.
• Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation.
• Security tooling integration and orchestration.
• Develop and implementation of SOAR capabilities that aligns with existing technology stack.
• Experience with KMS systems and methodologies.
• Identity based threat detection and prevention.
• Privileged Access and Session Management

• Design, implement, and maintain of work spaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks.
• Develop and refine custom queries for advanced threat hunting, incident investigation, and reporting.
• Optimize SIEM performance, cost, and data retention policies
• Identify new log sources work closely with infrastructure teams
• Identify, onboard, and configure critical security log sources with a focus on critical infrastructure services such as Active Directory (Domain Controllers, ADFS), network devices, firewalls, servers (Windows/Linux), and cloud infrastructure logs.
• Manage Event Collector and Event Forwarding infrastructure.
• Implement data filtering to ensure high-quality and relevant data ingestion.
• Parse and analyse custom log formats to extract relevant information for SIEM
• Develop, test, and deploy advanced threat detection use cases, and common infrastructure attack patterns.
• Translate threat intelligence and vulnerability insights into actionable detection rules.
• Continuously review and refine existing detection rules to minimize false positives and improve efficacy.

• Analyse, develop and refine security monitoring controls, practices and use-cases to detect anomalies and incidents across the applications and infrastructure estate.
• Collaborate with SOC team to enrich detection logic based on known vulnerabilities and misconfigurations.

• Formulate proactive threat hunting rule based on emerging threats and intelligence.
• Contribute to the development and improvement of security playbooks and operational procedures.

• Provide expert guidance on securing application and critical infrastructure components.
• Help setup POC and evaluation on new security tools and explore the gap in controls

• Providing subject matter expertise in Cyber Security team as needed.
• Contribute to the design and delivery of security monitoring and control effectiveness measures.
• Availability to cover anywhere from 7am to 7pm on all business days.

• Relevant experience on security tool implementation projects (SIEM, Proxy, EDR, DLP and SEG)
• Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE).
• Excellent communication skills, both written and verbal, with good documentation.
• Minimum of 5+ years of experience in Security Engineering, Security Automation/or Orchestration, or similar cybersecurity role.
• Demonstrable hands‑on experience with SIEM (implementation, configuration, custom rule creation).
• Strong practical experience with EDR and SIEM technology stack
• In‑depth understanding of Active Directory security principles, common attack vectors, and logging mechanisms.
• Experience with Windows event collection.
• Proficiency in scripting (e.g., Power Shell, Python) for automation, data manipulation, and custom log parsing.
• Solid understanding of networking concepts (TCP/IP, firewalls, proxies, VPNs) and security protocols.
• Familiarity with cloud security principles, Azure, GCP, AWS
• Working knowledge over a range of operating systems and platforms including:
  Windows Server, Windows XP, UNIX (Solaris, Linux),
• Working knowledge of networks: LAN, WAN, Palo Alto, Forti Gate,…