Senior Security Engineer at MUFG Pension & Market Services

Overview

The Senior Security Engineer plays a key role in embedding security into the

design and build phases of technology projects, ensuring solutions are secure,

compliant, and aligned with enterprise security standards. Reporting to the Head

of Information Security Transformation, this role provides hands-on technical

expertise to uplift security capabilities and support the delivery of secure

solutions across the organisation.

Key Accountabilities and main responsibilities

Strategic Focus

* Actively contribute to technology projects during design and build phases,

ensuring security is embedded early and effectively.

* Collaborate with architects, engineers, and delivery teams to review

technical designs and provide security input into solution architecture.

* Translate security requirements into practical implementation guidance,

ensuring alignment with business objectives and compliance standards.

* Participate in project planning, estimations, and workshops to represent

security interests and influence outcomes.

* Contribute to continuous improvement of secure design patterns and delivery

processes.

Operational Management

* Design and implement security solutions across applications, infrastructure,

and cloud environments.

* Support integration of security controls into CI/CD pipelines, automation

frameworks, and infrastructure-as-code environments.

* Deploy and manage tools such as DLP, WAF, DAM, endpoint protection, SIEM, and

IAM solutions.

* Conduct technical risk assessments, threat modelling, and control validation

during project execution.

* Serve as a point of escalation for complex technical security issues during

project implementation.

* Contribute to the design and build of secure cloud-first environments,

primarily in Microsoft Azure.

* Apply in-depth understanding of network, compute, and storage security across

hybrid cloud environments.

* Support secure configuration, monitoring, and hardening of systems in

collaboration with infrastructure and platform teams.

* Leverage hands-on experience with technologies including Microsoft Entra ID,

Office 365, Zscaler, Citrix, CASB, and Active Directory.

* Prepare documentation including build guides, runbooks, and security

implementation plans.

People Leadership

* Provide mentoring and technical guidance to junior engineers within the team

or project streams.

* Actively engage in team stand-ups, architecture reviews, and delivery

retrospectives to share learnings and promote secure delivery practices.

* Work collaboratively with multidisciplinary project teams and promote shared

accountability for secure outcomes.

Governance & Risk

* Review configuration changes and provide input into security policies and

control baselines during build activities.

* Support audit readiness and evidence gathering for new solutions.

* Ensure all designs and implementations comply with internal policies and

regulatory obligations, including privacy and data-protection requirements.

* Identify security gaps or control failures during project delivery and

support timely remediation.

The above list of key accountabilities is not an exhaustive list and may change

from time-to-time based on business needs.

Experience & Personal Attributes

Experience

* Bachelor’s degree in computer science or equivalent, with a major in

Information Security or Cybersecurity preferred.

* Minimum 7+ years in technical security roles, with a demonstrated record of

delivering complex security initiatives across design, build, assurance, and

operational transition.

* Hands-on experience with cloud, data, and Zero Trust security technologies

such as Microsoft Defender Suite, Microsoft Purview, Zscaler or Netskope,

CASB, data loss prevention, secure access service edge, and web application

firewalls.

* Experience with enterprise identity and access technologies such as Microsoft

Entra ID, Active Directory, SailPoint, CyberArk, and Okta, including SSO and

integration standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM.

* Exposure to security operations and governance platforms such as Microsoft

Sentinel, Splunk, CrowdStrike, vulnerability-management tooling, and

ServiceNow Security Operations or GRC.

* Ability to apply enterprise security standards, regulatory obligations, and

risk-management requirements within complex, product-centric delivery

environments.

* Deep expertise in one or more priority domains—particularly identity, cloud,

privileged access, or Zero Trust—is preferred; candidates are not expected to

have experience with every listed technology.

Personal Attributes

* Strong technical problem-solving and analytical skills.

* Effective communicator who can translate security concepts into actionable

guidance for technical and non-technical stakeholders.

* Ability to work collaboratively in multidisciplinary project teams while

managing multiple concurrent priorities.

* Demonstrates a proactive, hands-on mindset with a focus on secure enablement

and delivery excellence.

MUFG Pension & Market Services is a global, digitally enabled business that

empowers a brighter future by connecting millions of people with their assets –

safely, securely and responsibly.

Through our two businesses MUFG Retirement Solutions and MUFG Corporate Markets,

we partner with a diversified portfolio of global clients to provide robust,

efficient and scalable services, purpose-built solutions and modern technology

platforms that deliver world class outcomes and experiences.

A member of MUFG, a global financial group, we help manage regulatory

complexity, improve data management and connect people with their assets,

through exceptional user experience that leverages the expertise of our people

combined with scalable technology, digital connectivity and data insights.

Our Corporate Centre Technology Services & Information Security function manages

our IT infrastructure, technology operations, and information security. It

oversees IT system development, maintenance, and security to ensure smooth

technology operations support our daily activities.

We implement strong cybersecurity measures to protect sensitive data and manage

service delivery through effective IT service management practices. By

supporting global operations, we ensure our technological infrastructure is

secure, efficient, and aligned with business needs.

Read the full description on the employer’s site →