Senior Security Engineer

A global, digitally enabled business that empowers a brighter future by connecting millions of people with their assets – safely, securely and responsibly. Through our two businesses MUFG Retirement Solutions and MUFG Corporate Markets, we partner with a diversified portfolio of global clients to provide robust, efficient and scalable services, purpose-built solutions and modern technology platforms that deliver world class outcomes and experiences. A member of MUFG, a global financial group, we help manage regulatory complexity, improve data management and connect people with their assets, through exceptional user experience that leverages the expertise of our people combined with scalable technology, digital connectivity and data insights.

Overview

The Senior Security Engineer plays a key role in embedding security into the design and build phases of technology projects, ensuring solutions are secure, compliant, and aligned with enterprise security standards. Reporting to the Head of Information Security Transformation, this role provides hands-on technical expertise to uplift security capabilities and support the delivery of secure solutions across the organisation.
Key Accountabilities and main responsibilities
Strategic Focus 

• Actively contribute to technology projects during design and build phases, ensuring security is embedded early and effectively.
• Collaborate with architects, engineers, and delivery teams to review technical designs and provide security input into solution architecture.
• Translate security requirements into practical implementation guidance, ensuring alignment with business objectives and compliance standards.
• Participate in project planning, estimations, and workshops to represent security interests and influence outcomes.
• Contribute to continuous improvement of secure design patterns and delivery processes.

• Design and implement security solutions across applications, infrastructure, and cloud environments.
• Support integration of security controls into CI/CD pipelines, automation frameworks, and infrastructure-as-code environments.
• Deploy and manage tools such as DLP, WAF, DAM, endpoint protection, SIEM, and IAM solutions.
• Conduct technical risk assessments, threat modelling, and control validation during project execution.
• Serve as a point of escalation for complex technical security issues during project implementation.
• Contribute to the design and build of secure cloud-first environments, primarily in Microsoft Azure.
• Apply in-depth understanding of network, compute, and storage security across hybrid cloud environments.
• Support secure configuration, monitoring, and hardening of systems in collaboration with infrastructure and platform teams.
• Leverage hands-on experience with technologies including Microsoft Entra ID, Office 365, Zscaler, Citrix, CASB, and Active Directory.
• Prepare documentation including build guides, runbooks, and security implementation plans.

• Provide mentoring and technical guidance to junior engineers within the team or project streams.
• Actively engage in team stand-ups, architecture reviews, and delivery retrospectives to share learnings and promote secure delivery practices.
• Work collaboratively with multidisciplinary project teams and promote shared accountability for secure outcomes.

• Review configuration changes and provide input into security policies and control baselines during build activities.
• Support audit readiness and evidence gathering for new solutions.
• Ensure all designs and implementations comply with internal policies and regulatory obligations, including privacy and data-protection requirements.
• Identify security gaps or control failures during project delivery and support timely remediation.

• Bachelor’s degree in computer science or equivalent, with a major in Information Security or Cybersecurity preferred.
• Minimum 7+ years in technical security roles, with a demonstrated record of delivering complex security initiatives across design, build, assurance, and operational transition.
• Hands-on experience with cloud, data, and Zero Trust security technologies such as Microsoft Defender Suite, Microsoft Purview, Zscaler or Netskope, CASB, data loss prevention, secure access service edge, and web application firewalls.
• Experience with enterprise identity and access technologies such as Microsoft Entra ID, Active Directory, SailPoint, CyberArk, and Okta, including SSO and integration standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Exposure to security operations and governance platforms such as Microsoft Sentinel, Splunk, CrowdStrike, vulnerability-management tooling, and ServiceNow Security Operations or GRC.
• Ability to apply enterprise security standards, regulatory obligations, and risk-management requirements within complex, product-centric delivery environments.
• Deep expertise in one or more priority domains—particularly identity, cloud, privileged access, or Zero Trust—is preferred; candidates are not expected to have experience with every listed technology.

• Strong technical problem-solving and analytical skills.
• Effective communicator who can translate security concepts into actionable guidance for technical and non-technical stakeholders.
• Ability to work collaboratively in multidisciplinary project teams while managing multiple concurrent priorities.
• Demonstrates a proactive, hands-on mindset with a focus on secure enablement and delivery excellence.