Cyber Threat Detection and Hunting, AVP

Mitsubishi UFJ Financial Group•Jersey City, NJ

15h•Hybrid

About The Position

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details. Job Summary In this role you will focus on proactively hunting for threat actor’s tactics, techniques, procedures, and behaviors based on Threat Intelligence and formed hypotheses. You will use your knowledge of networking, operating systems, SIEM, EDR and threat hunting tools to find adversaries, identify gaps in detection and cyber hygiene, and recommend improvements to detection rules. You will assist in incident response with threat actor behavior, IoC based hunting, and track and measure the value of threat hunting activity. You will work closely with a highly skilled team of individuals globally, collaborating across lines of defense, businesses, and technology teams disseminating threat hunting activity and risk mitigation results. This is a 24/7 Cybersecurity Operations organization so you may be occasionally required to perform threat hunting work after hours or on weekends in support of a cyber incident or other threat related requirement.

Requirements

3+ years of prior Threat Hunting or Incident Response experience
Proficiency in Python , PowerShell , or Bash for automation, data parsing, and custom tooling.
Experience writing detection logic using SIGMA , YARA , Splunk SPL , or KQL .
Ability to develop and maintain scripts for threat hunting workflows and incident response.
Knowledge of forensic tools like Volatility , Autopsy , FTK , or EnCase .
Knowledge of SIEM, EDR, Networking, Operating Systems, and Scripting Languages
3+ years overall experience working in a global organization
Minimum of 3 years working directly in Cybersecurity Operations

Nice To Haves

Experience with Threat or Vulnerability intelligence, assessment, management a plus
Knowledge of industry standards and frameworks such as NIST, MITRE ATT&CK, TAHITI, PEAK
Experience working within the Financial Services Industry preferred
Relevant technical and industry certifications a plus such as CISSP, ISSMP, SANS, GCIA, CISM, EnCE, CEH, GCFA, GCFE, GCIH, or GSEC

Responsibilities

Perform threat hunts using SIEM, EDR and Threat Hunting Tools, based on threat intelligence, threat actor TTPs and IOCs, and Threat Hunting hypotheses
Weekly/Monthly tracking and reporting of Threat Hunting activity, progress, metrics
Threat Hunting supporting incident response
Serve as backup and rotation for Threat and Vulnerability Intelligence functions
Support audit and regulatory exams
Administer tools and platforms and related technologies to support Threat Hunting
Document and maintain processes and procedures
Presentations to stakeholders and senior leaders