Incident Response Lead Specialist, Vice President

Job Summary

In this role you will focus on researching potential cybersecurity threats to various systems, technologies, operations, and programs throughout multiple environments. You will perform analysis based on this research to determine the risk to the organization and take appropriate actions based on that analysis. Responsibilities include rapidly responding to potential incidents and events to minimize risk exposure and ensure the confidentiality, integrity, and availability of assets and business processes.

Additionally, you will seek opportunities to strengthen remediation capabilities, reduce response times for incidents, and produce analyses of cybersecurity events that include perspectives on the behavior of adversaries.

• Conduct analysis of artifacts to determine methods of intrusion and best course of resolution while driving security improvement.
• Perform incident response, investigate potential cybersecurity events, and manage mitigation actions.
• Analyze security data from all systems in real time to spot and thwart potential threats, attacks, and other violations.
• Perform breach indicator assessments to investigate network traffic for malicious activity.
• Generate reports analyzing activities or trends both within and outside of the organization.
• Develop security operations detection playbooks, and automate threat detection, monitoring, response, and forensics activities.
• Support compliance inquiries from IT risk management and auditors to ensure documentation and processes align with policies and regulations.
• Lead and mentor junior analysts as needed.
• Research evolving threats, techniques, tools, and vulnerabilities in support of information security efforts.
• Maintain current knowledge of information security frameworks (ISO 27001, NIST 800 series, FFIEC, SOC2, FedRAMP, STAR, etc.).
• Participate in development of information security policies, standards, and procedures.

• 8+ years of experience in Cybersecurity Operations or Information Security.
• Relevant technical and industry certifications such as CISSP, ISSMP, SANS, GIAC, GCIA, CISM, CEH, GCFA, GCFE, GCIH, or GSEC (preferred).
• Experience in one or more security domains including Incident Response & Forensics, Security Governance & Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management.
• Familiarity with enterprise detection and response technologies and processes (advanced threat detection tools, intrusion detection/prevention systems, network packet analysis, endpoint detection and response, firewalls, anti‑malware/anti‑virus, SIEM tools, etc.).
• Experience with Crowd Strike, Torq, Tanium, Proofpoint, WAF, O365 security, AWS Security, and open‑source incident response and forensic tools.
• Strong analytical, qualitative, and quantitative reasoning skills.
• Understanding of network protocols, operating systems (Windows, Unix, Linux, databases), and mobile device security.
• Knowledge of cloud security, networks, databases, and applications.
• Fundamental understanding of enterprise cybersecurity frameworks (MITRE ATT&CK, Cyber Kill Chain).
• Bachelor’s degree in Computer Science or a closely related discipline, or equivalent combination of formal education and experience.

Base pay range: $126,000 – $180,000 depending on location, knowledge, skills, and experience. May also be eligible for discretionary performance‑based bonus and/or incentive compensation. The Total Rewards program provides comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays.

Hybrid schedule: four days on‑site at the MUFG office or client sites, and one remote day per week.

MUFG considers all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status protected under applicable law.