Assistant Vice President, Red Team Operator

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

• Degree or equivalent work experience equally preferable
• Degree in Computer Science or related fields

• Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or other security certifications desired

• Experience in cybersecurity assessment activities or IT audit, penetration testing, and/or vulnerability management
• Experience working in a global, complex, matrix-managed organization
• Prior information technology (IT) experience in mid or large-scale companies
• Prior experience in regional, national or multinational financial institutions
• Experience with one or more of the following control areas:
  • Identity and Access Management
  • Incident Response and Logging
  • Encryption
  • Secure Coding
  • Vulnerability Management
  • Configuration Management
• Experience in performing information security assessments; provide information security guidance to business stakeholders; interpreting and applying information security policy and standards
• Experience in working with the SIG (Standard Information Gathering) questionnaire, SOC2 reports, Penetration Test results, PCI (Payment Card Industry) reports as well as other Information Security documentation
• Technical knowledge and hands on experience with security and networking architecture, network security design, routers, wireless security, intrusion prevention/detection, firewall architecture, SIEM, DLP, and encryption
• Knowledge and prior experience with operating systems internals (Linux, Windows), network protocols and technologies, web services, databases, scripting, and programming languages (C/C++, Java, Perl, Python, Assembly)

• Understanding of one or more compliance frameworks: NIST, FFIEC, GLBA, SOX, PCI, etc
• Familiarity with one or more of the following technology areas is highly desirable:
  • Network infrastructure (technologies, architectures, operations)
  • Various network and host-based security products and services
  • Active Directory, servers, services, desktops and mobile devices
  • Unix, Linux, AIX
  • IBM Mainframe, Top Secret
  • SQL, Oracle, DB2 Databases
• Ability to perform technical risk assessments and synthesize observations at a macro level, identifying indicators of changing risk and/or symptoms of process or control deficiencies
• Ability to identify and propose process and technology controls in dynamic environments
• Ability to conduct Computer Network Defense (CND) analysis by performing Deep Packet Inspection (DPI) of network traffic to identify and analyze anomalies and potential security issues
• Working knowledge and experience applying Information Assurance techniques to the implementation of complex networked systems environments
• In-depth knowledge of applying network switching, TCP/IP, IP Addressing and Routing, WAN Technologies, Operating and Configuring networked Devices, and Managing Network Environments, extending Switched Networks with VLANS, Determining IP Routes, Managing IP traffic with Access Lists, Establishing Point-to-Point connections, and Establishing Frame
• Demonstrate in-depth knowledge of concepts, best practices and controls in a breadth of information…