MUFG

Global bank offering diversified financial services

Senior Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeIndiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree in computer science or equivalent is required; a major in Information Security or Cybersecurity is preferred.
At least 7 years of experience in technical security roles, delivering complex security initiatives across design, build, assurance, and operational transition.
Hands-on experience with cloud, data, and Zero Trust security technologies, such as Microsoft Defender Suite, Microsoft Purview, Zscaler or Netskope, CASB, data loss prevention, secure access service edge, and web application firewalls.
Experience with enterprise identity and access technologies such as Microsoft Entra ID, Active Directory, SailPoint, CyberArk, and Okta, including SSO and integration standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM.
Exposure to security operations and governance platforms such as Microsoft Sentinel, Splunk, CrowdStrike, vulnerability-management tooling, and ServiceNow Security Operations or GRC.
Ability to apply enterprise security standards, regulatory obligations, and risk-management requirements within complex, product-centric delivery environments.
Strong technical problem-solving and analytical skills.
Ability to communicate security concepts as actionable guidance for technical and non-technical stakeholders.
Ability to collaborate in multidisciplinary project teams while managing multiple concurrent priorities.
A proactive, hands-on mindset focused on secure enablement and delivery.

Responsibilities

Contribute to technology projects during design and build phases, ensuring security is embedded early and effectively.
Collaborate with architects, engineers, and delivery teams to review technical designs and provide security input into solution architecture.
Translate security requirements into practical implementation guidance aligned with business objectives and compliance standards.
Participate in project planning, estimations, and workshops to represent security interests and influence outcomes.
Contribute to continuous improvement of secure design patterns and delivery processes.
Design and implement security solutions across applications, infrastructure, and cloud environments.
Support integration of security controls into CI/CD pipelines, automation frameworks, and infrastructure-as-code environments.
Deploy and manage DLP, WAF, DAM, endpoint protection, SIEM, and IAM solutions.
Conduct technical risk assessments, threat modelling, and control validation during project execution.
Serve as an escalation point for complex technical security issues during project implementation.
Contribute to the design and build of secure cloud-first environments, primarily in Microsoft Azure.
Apply security knowledge across network, compute, and storage in hybrid cloud environments.
Support secure configuration, monitoring, and hardening of systems with infrastructure and platform teams.
Use Microsoft Entra ID, Office 365, Zscaler, Citrix, CASB, and Active Directory technologies.
Prepare build guides, runbooks, and security implementation plans.
Provide mentoring and technical guidance to junior engineers within the team or project streams.
Participate in team stand-ups, architecture reviews, and delivery retrospectives to share learnings and promote secure delivery practices.
Collaborate with multidisciplinary project teams and promote shared accountability for secure outcomes.
Review configuration changes and provide input into security policies and control baselines during build activities.
Support audit readiness and evidence gathering for new solutions.
Ensure designs and implementations comply with internal policies and regulatory obligations, including privacy and data-protection requirements.
Identify security gaps or control failures during project delivery and support timely remediation.

Desired Qualifications

A major in Information Security or Cybersecurity.
Deep expertise in one or more priority domains, particularly identity, cloud, privileged access, or Zero Trust. Candidates are not expected to have experience with every listed technology.

Overview

The Senior Security Engineer plays a key role in embedding security into the design and build phases of technology projects, ensuring solutions are secure, compliant, and aligned with enterprise security standards. Reporting to the Head of Information Security Transformation, this role provides hands-on technical expertise to uplift security capabilities and support the delivery of secure solutions across the organisation.

Key Accountabilities and main responsibilities

Strategic Focus

Actively contribute to technology projects during design and build phases, ensuring security is embedded early and effectively.
Collaborate with architects, engineers, and delivery teams to review technical designs and provide security input into solution architecture.
Translate security requirements into practical implementation guidance, ensuring alignment with business objectives and compliance standards.
Participate in project planning, estimations, and workshops to represent security interests and influence outcomes.
Contribute to continuous improvement of secure design patterns and delivery processes.

Operational Management

Design and implement security solutions across applications, infrastructure, and cloud environments.
Support integration of security controls into CI/CD pipelines, automation frameworks, and infrastructure-as-code environments.
Deploy and manage tools such as DLP, WAF, DAM, endpoint protection, SIEM, and IAM solutions.
Conduct technical risk assessments, threat modelling, and control validation during project execution.
Serve as a point of escalation for complex technical security issues during project implementation.
Contribute to the design and build of secure cloud-first environments, primarily in Microsoft Azure.
Apply in-depth understanding of network, compute, and storage security across hybrid cloud environments.
Support secure configuration, monitoring, and hardening of systems in collaboration with infrastructure and platform teams.
Leverage hands-on experience with technologies including Microsoft Entra ID, Office 365, Zscaler, Citrix, CASB, and Active Directory.
Prepare documentation including build guides, runbooks, and security implementation plans.

People Leadership

Provide mentoring and technical guidance to junior engineers within the team or project streams.
Actively engage in team stand-ups, architecture reviews, and delivery retrospectives to share learnings and promote secure delivery practices.
Work collaboratively with multidisciplinary project teams and promote shared accountability for secure outcomes.

Governance & Risk

Review configuration changes and provide input into security policies and control baselines during build activities.
Support audit readiness and evidence gathering for new solutions.
Ensure all designs and implementations comply with internal policies and regulatory obligations, including privacy and data-protection requirements.
Identify security gaps or control failures during project delivery and support timely remediation.

The above list of key accountabilities is not an exhaustive list and may change from time-to-time based on business needs.

Experience & Personal Attributes

Experience

Bachelor’s degree in computer science or equivalent, with a major in Information Security or Cybersecurity preferred.
Minimum 7+ years in technical security roles, with a demonstrated record of delivering complex security initiatives across design, build, assurance, and operational transition.
Hands-on experience with cloud, data, and Zero Trust security technologies such as Microsoft Defender Suite, Microsoft Purview, Zscaler or Netskope, CASB, data loss prevention, secure access service edge, and web application firewalls.
Experience with enterprise identity and access technologies such as Microsoft Entra ID, Active Directory, SailPoint, CyberArk, and Okta, including SSO and integration standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM.
Exposure to security operations and governance platforms such as Microsoft Sentinel, Splunk, CrowdStrike, vulnerability-management tooling, and ServiceNow Security Operations or GRC.
Ability to apply enterprise security standards, regulatory obligations, and risk-management requirements within complex, product-centric delivery environments.
Deep expertise in one or more priority domains—particularly identity, cloud, privileged access, or Zero Trust—is preferred; candidates are not expected to have experience with every listed technology.

Personal Attributes

Strong technical problem-solving and analytical skills.
Effective communicator who can translate security concepts into actionable guidance for technical and non-technical stakeholders.
Ability to work collaboratively in multidisciplinary project teams while managing multiple concurrent priorities.
Demonstrates a proactive, hands-on mindset with a focus on secure enablement and delivery excellence.

About the Company

MUFG

Global bank offering diversified financial services

MUFG is a major global financial group that provides a wide range of banking and financial services, including commercial and trust banking, securities, credit cards, and asset management. Its products are delivered through a network of domestic and international banks, digital platforms, and financial advisers, offering loans, deposits, payments, investment services, and asset management. MUFG stands out due to its size and scale as one of the world’s largest financial groups, its diversified offerings across banking and securities, and its strong international presence (notably expanding in the U.S. after investing in Morgan Stanley in 2008). Its goal is to support economic growth worldwide by expanding its global footprint and promoting sustainable finance.

Company size: 10,001+
Company stage: IPO
Headquarters: Tokyo, Japan
Founded: 2006

Recently Posted Jobs

Explore more opportunities at MUFG

See more jobs