AI and Monitoring for Security, VP

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary:

As a AI and Monitoring for Security Vice President you will occupy a crucial position in our Security Operations center, with your primary focus centered on process improvement through the use of automation and artificial intelligence integration into SOC and IR processes. You will support conceiving and refining use cases and strategies that intricately align with the global security frameworks. Your expertise with this framework and the cyber security kill chain will form the foundation where our defensive capabilities are fortified, ensuring the ability to not only identify and respond, but also impede cyber threats in a proactive manner.

Major Responsibilities:

Security Monitoring & Incident Response Support 

• Support advanced security event monitoring, triage, and investigation activities across global environments, leveraging expertise in SIEM, UEBA, SOAR, DLP, EDR, and cloud native tooling.

• Apply frameworks such as MITRE ATT&CK, Cyber Kill Chain, and CRI to ensure detections and response actions are mapped to industry-aligned threat behaviors.

• Draw upon your comprehensive understanding of the cyber landscape to design and execute advanced detection and response strategies, employing an array of sophisticated security tools and technologies. Your solutions will serve as the first line of defense, minimizing potential risks and vulnerabilities.

Automation, AI Integration & Workflow Engineering

• Aid in the design and implementation of automated workflows using SOAR, low code platforms, custom scripting, and API integrations to streamline SOC and IR processes.

• Operationalize machine learning and LLM powered capabilities—such as case summarization, alert enrichment, anomaly detection, and autonomous investigation—while maintaining human in the loop governance.

• Identify high value automation opportunities and develop scalable, repeatable solutions that reduce MTTR and improve SOC efficiency.

• Collaborate with platform engineering and cloud teams to deploy automation across hybrid (cloud/on prem) environments.

Reporting, Metrics, Leadership & Continuous Improvement

• Develop and maintain metrics, dashboards, and reporting used by management to track detection coverage, automation ROI, incident trends, and SOC performance.

• Lead and mentor junior analysts and interns, ensuring consistent development, high-quality execution, and alignment to operating procedures.

• Champion process optimization by identifying gaps in workflow, documentation, and tool usage, and driving improvements in collaboration with global teams.

• Contribute to strategic initiatives and capability uplift across a global SOC/IR operating model.

Qualifications:

• Bachelor’s degree in Information Technology, Cyber Security, Computer Science, Data Analytics or related discipline or equivalent work experience

• 4-8 years in Information Security or other Information Technology fields

• Experience working within the Financial Services Industry preferred

• Experience as a team lead or guiding junior analysts preferred

• Experience working on a global team preferred

• Experience with use case and automation related to UEBA, SIEM, SOAR, DLP, EDR and other open-source security tools

• Knowledge of models/frameworks such as Cyber Kill Chain, MITRE and CRI (Cyber Risk Institute)

• Experience in scripting or working in low-code environments

• Experience integrating APIs and building automated workflows across cloud/on‑prem systems

• Understanding of machine learning basics, LLM operations, and AI model lifecycle concepts

• Well-developed analytic, qualitative, and quantitative reasoning skills

• Demonstrated creative problem-solving abilities

• Security event monitoring, investigation, and overall incident response process

• Strong time management skills to balance multiple activities and lead junior analysts or interns as needed

• In-depth knowledge in one or more security domains including Security Governance and Oversight, Security Risk Management, Network Security, Threat and Vulnerability Management, and Incident Response and Forensics

• Experience creating trending metrics and management reports

• Experience with cloud computing security, network, operating system, database, application, and mobile device security

• Experience with information security risk management

• Preferred Certifications: CISSP, ISSMP, SANS, GSEC, GCFA, GNFA, GIAC and/or GCIH

Other:

• As per MUFG’s Return to Office policy, a candidate must work onsite for 4 days and 1 day remotely out of Jersey City, NJ.

• The typical base pay range for this role is between $123K - $167K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.

• MUFG Benefits Summary

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.

We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.