Security Engineering, Associate / Assistant Vice President
Mitsubishi UFJ Financial Group4 days ago
Jersey City, NJ, USAStaff+
Base Salary
$113k - $146k/yr
Responsibilities
- Conduct DAST scans with Invicti and SAST and SCA scans with Veracode.
- Perform manual verification and authenticated secondary scans with Burp Suite.
- Analyze findings, identify root causes, reduce false negatives, and collaborate with developers on remediation.
- Integrate security testing into CI/CD pipelines and DevOps workflows.
- Evaluate vulnerabilities in Java, .NET, Python, and other application codebases and provide secure coding guidance.
- Advise teams on OWASP Top 10 and SANS 25 vulnerabilities, including exploitation and prevention techniques.
- Ensure required release and periodic scans occur and findings are addressed within SLA.
- Review false-positive and mitigated-by-design requests and approve applicable SDLC tasks.
- Maintain compliance with NIST, PCI-DSS, FFIEC, SOX, and CIS security frameworks.
- Automate security scanning and reporting through scripting and maintain organized security artifacts.
- Stay current on exploitation techniques, security research, and industry best practices.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
- At least 5 years of experience in application security, secure development, DAST, and SAST.
- Hands-on experience with DAST tools such as Invicti/Netsparker, AppScan, Burp Suite, and Acunetix.
- Experience with SAST tools including Veracode and Fortify.
- Experience performing manual testing with Burp Suite.
- Strong knowledge of OWASP Top 10, SANS 25, and MITRE ATT&CK vulnerabilities and techniques.
- Software development experience in Java, .NET, Python, or similar languages.
- Scripting ability in Python, Bash, or PowerShell for security automation.
- Familiarity with secure software development life cycle practices and CI/CD pipelines.
- Cloud security experience with AWS, Azure, or Oracle Cloud is preferred.
- Relevant certifications such as OSCP, OSWE, GWAPT, or CEH are highly desirable.
- Strong collaboration, communication, technical reporting, documentation, and analytical skills.
Benefits
- Hybrid schedule requiring four days per week at an MUFG office or client site and one remote day.
- Base pay range of $113K-$146K, with potential discretionary performance-based bonus or incentive compensation.
- Comprehensive health and wellness benefits, retirement plans, educational assistance, and training programs.
- Income replacement for qualified employees with disabilities.
- Paid maternity and parental bonding leave, vacation, sick days, and holidays.
About Mitsubishi UFJ Financial Group
Mitsubishi UFJ Financial Group is a publicly traded Japanese banking group headquartered in Chiyoda, Tokyo, offering commercial and investment banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing to consumers, corporations, and institutions. It generates revenue from lending interest, transaction fees, and investment services. Formed in 2005 through the merger of Mitsubishi Tokyo Financial Group and UFJ Holdings, MUFG operates globally across the Americas, EMEA, and Asia-Pacific markets.