Job Abstract

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 7th largest financial group in the world. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

Job Summary

We are seeking a highly skilled and experienced Senior Modern Workplace Endpoint Security Engineer. The successful candidate will be part of the Incubation engineering and strategy team. Understanding of packaging and deploying M365 products to both physical and virtual Windows machines and incorporating M365 applications to Windows Images. Experience deploying and configuring M365 applications such as OneDrive, Teams, Defender and SharePoint Online. Experience planning and deploying M365 enterprise software updates and security patches. The candidate will also be responsible for working directly with third party hardware vendors. To develop, test, and create hardware standards and enforce security policies for laptops, desktops, tablets, and mobile devices used by the enterprise. Real life large enterprise endpoint and application support experience is required.

Major Responsibilities:

• Engineer high quality solutions for modern management of endpoints and applications.
• Stay abreast of the latest cybersecurity trends and threats, ensuring that our security tools, hardware devices and technology implementations remain ahead of potential attackers.
• Serve as a subject matter expert, offering guidance training and support to both technical and non-technical team members.
• Perform functionality and performance tests of new hardware (endpoints and peripherals) and software.
• Work directly with vendors to perform reoccurring testing of new hardware and peripherals. Ensuring the enterprise standards catalog is always up to date and certified, for enterprise deployment.
• Recommend and design innovative endpoint solutions leveraging the full Microsoft 365 technology stack, including Azure Active Directory, Intune, and Defender.
• Stay up to date with the latest technology trends and advancements in endpoint devices and support techniques to allow for a 3-year roadmap to always be created and updated.
• Manage applications, endpoints, device enrollment and configure profiles in Intune.
• Conduct regular system audits to identify potential vulnerabilities and recommend enhancements.
• Lead the response to an investigation of security breaches or incidents on the endpoint technology portfolio, including the development of mitigation strategies.
• Design, implement and administer endpoint cyber security solutions and policies to ensure alignment with current threats while maintaining high performance.
• Develop and implement automation solutions using advanced PowerShell scripts.
• Be able to document, test and evaluate various endpoint hardware devices finding security holes and working with the vendor to resolve them.
• Manage, support and deploy M365 applications using cloud-based tools.
• Experience with working with Endpoint EDR’s such as Microsoft Defender for Endpoint (MDE) or CrowdStrike.
• Provide detailed reports and presentations to executive stakeholders, outlining security measures, technology improvements, and recommendations.
• Leads new feature development from an implementation perspective, working closely with vendors and occasionally product and project teams.
• Provides advanced level technical support for mid-size to large projects.
• Responsible for engineering solutions for the most complex Endpoint and O365 stack issues.
• Bring a passion to stay on top of tech trends, experiment with and learn new technologies, participate in internal & external technology communities, and mentor other members of the engineering community.
• Encourage innovation, implementation of cutting-edge technologies, inclusion, outside-of-the-box thinking, teamwork, self-organization, and diversity.
• Fine tune rules and create new rules in response to requests from other security and business teams.
• Security and Compliance: Implement security best practices and compliance policies within the platform.
• Documentation and Training: Create detailed documentation for other engineers and administrators to understand and implement.
• Monitoring and Alerting: Create monitoring and alerting using tools like Azure Monitor, Tanium and Splunk.
• Collaborate with the architecture team to ensure alignment with broader infrastructure goals.
• Have interpersonal skills necessary to work with various individuals and teams of engineers, clients, and leaders across the company.
• Manage threat intelligence ingestion.
• Work with the Operations team to supervise agent upgrades or deployments to endpoints.
• Executing and running Proof of Concept (POC)s and Pilots

Qualifications:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Advanced PowerShell scripting knowledge will be required, to help develop and deploy solutions.
• 5-7 years of experience in endpoint cybersecurity and engineering.
• Technical Skills with exposure to the following: Microsoft 365 Security, Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Compliance, Data Loss Prevention. Modern Management - Mobility and Security Solutions in any of the following: Microsoft Intune; Autopilot, Desktop Analytics, Conditional Access, identity governance, Azure Active Directory (AAD), Microsoft Cloud App Security (MCAS); Advanced Threat Analytics; Defender for O365, Microsoft Endpoint Configuration Manager. Endpoint Management Security related technologies: Microsoft Enterprise Mobility Suite + Security (EMS), Active Directory/Identity Windows Defender Advanced Threat Protection (D-ATP) Office 365 Advanced Threat Protection Other endpoint security solutions and comprehensive threat protection technologies
• Proven experience in implementing and managing Modern Windows and Mac OS computers.
• Exceptional soft skills, including the ability to communicate effectively with executive stakeholders and customers.
• Strong analytical and problem-solving skills, with the capability to think strategically about cybersecurity challenges.
• In-depth knowledge of current cybersecurity threats, trends, and the cybersecurity landscape.
• Ability to work independently and as part of a team in a fast-paced, multi-customer environment.
• Expert knowledge in Endpoint Hardware and Software
• Advanced knowledge of the Windows OS, MECM, Intune, Azure, and endpoint architecture
• Ability to identify and implement automation opportunities to increase productivity and maintain high quality deployments.
• Experience leading and mentoring staff, technical support organizations.
• Experience with production readiness review process.
• Ability to work under pressure and handle multiple problems simultaneously.

Plus to have

• Microsoft Certified: Security, Compliance, and Identity Fundamentals– Fundamental understanding of Microsoft security, compliance, and identity solutions.
• Microsoft Certified: Security Operations Analyst Associate – Expertise in using Microsoft Defender and other Microsoft security solutions.
• CompTIA Security+ – Baseline cybersecurity skills necessary to perform core security functions.

The typical base pay range for this role is between $135K - $165K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.

MUFG Benefits Summary

We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.