SIEM & Data Engineer [T500-21279]

About Us :

MUFG Bank, Ltd. is Japan’s premier bank, with a global network spanning in more than 40 markets. Outside of Japan, the bank offers an extensive scope of commercial and investment banking products and services to businesses, governments, and individuals worldwide. MUFG Bank’s parent, Mitsubishi UFJ Financial Group, Inc. (MUFG) is one of the world’s leading financial groups. Headquartered in Tokyo and with over 360 years of history, the Group has about 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. The Group aims to be the world’s most trusted financial group through close collaboration among our operating companies and flexibly respond to all the financial needs of our customers, serving society, and fostering shared and sustainable growth for a better world. MUFG’s shares trade on the Tokyo, Nagoya, and New York stock exchanges.

MUFG Global Service Private Limited :

Established in 2020, MUFG Global Service Private Limited (MGS) is 100% subsidiary of MUFG having offices in Bengaluru and Mumbai. MGS India has been set up as a Global Capability Centre / Centre of Excellence to provide support services across various functions such as IT, KYC / AML, Credit, Operations etc. to MUFG Bank offices globally. MGS India has plans to significantly ramp-up its growth over the next 18-24 months while servicing MUFG’s global network across Americas, EMEA and Asia Pacific.

Job Profile :

MUFG is seeking a highly motivated SIEM Engineer as part of the Engineering team to design and implement cutting-edge technology to improve security posture. This person will work with other engineering team members to drive the engineering standards and implementation across the global deployment.

Roles and Responsibilities :

Must be a technical expert on SIEM products and technology

Research and look for opportunities to adopt the best practices and industry standards to enhance the SIEM platforms

Engineer and implement various solutions on SIEM platforms as per business requirements

Define SIEM platform standards including data schema, modelling, normalization, monitoring and alerting

Must have experience in dashboard and reporting as per requirements

Should have experience in AI and ML to build the modern SIEM and data monitoring solution.

Must be able to configure SIEM products with different policies, rules and configurations.

Must be able to customize the SIEM products if out of the box solution is not available

Define standard patterns to integrate different systems into SIEM platforms

Generate different types of reports using SIEM data

Identify opportunities to enhance the current baseline processes and configuration

Produce engineering, integration and process related documentation.

Manage vendor relationships to drive roadmap, solution design, implementation and troubleshooting

Work with key stakeholders of the services to ensure the expectations are meeting the requirements

Able to conduct the POC of new features to develop new solutions

Knowledge of various applications and systems that include Servers, middleware, Clouds (SaaS, PaaS and IaaS), Containers, to come up with the right approach of SIEM integration

Lead pro-active System Security Specific reviews and self-assessments of the policies, procedures and systems, including but not limited to distributed computer systems, Internet, Intranet, and Extranet networks.

Ability to understand security risks and controls, to analyze various methods of controlling information security problems, determine the strengths and weaknesses of each method and implement the best cost-justified solution

Ability to provide technical directions to other peer staff members, and to train new staff on the security team

Job Requirements :

At least 5+ years of experience in technology with emphasis on cyber security.

At least 3+ years of experience in SIEM products such as Splunk, Cribl, Elastic, Datadog, AWS CloudTrail, cloud watch, Azure event hub, AWS S3, etc.

At least 1+ years of experience in Data Lake and data warehouse using products such as AWS S3, Snowflake, Databricks, etc.

Experience with scripting is highly preferred like Python, Ansible etc.

Experience in creating trending, metrics, and management reports

Experience working in complex and large-scale environments.

Familiar with industry security regulations and frameworks (MITRE Attack Framework, CIS, etc.)

Experience in creating trending, metrics, and management reports

Knowledge of Common Information Model mapping is required

Working knowledge in RegEx, Splunk search language, etc. is required.

Experience working in the financial services (Top 10 banks preferred) with knowledge of regulations such as FFIEC, SOX, or other highly regulated industries such as healthcare, utilities, or aerospace.

Knowledge and experience operating in hybrid-cloud environment.

Knowledge and experience with SIEM management solutions.

Knowledge of networking fundamentals (e.g. TCP / IP) and strong troubleshooting skills.

Knowledge of modern security principles and their practical applications.

Knowledge and experience in AWS or Azure

Education :

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or relevant industry certifications. Equivalent work experience is equally preferable.

Preferred Certifications : Are these really preferred? It’s ok if they just wanted to ask if we are on track with the correct Certs

Certified Information Systems Security Professional (CISSP)

Certified Information Systems Manager (CISM)

Certified Information System Auditor (CISA)

Certified Ethical Hacker (CEH)

Equal Opportunity Employer

The MUFG Group is committed to providing equal employment opportunities to all applicants and employees and does not discriminate on the basis of race, colour, national origin, physical appearance, religion, gender expression, gender identity, sex, age, ancestry, marital status, disability, medical condition, sexual orientation, genetic information, or any other protected status of an individual or that individual's associates or relatives, or any other classification protected by the applicable laws.