Incident Response Planning and Operations, Analyst

MUFG is a global financial group focused on serving clients, organizations, and communities through trusted financial services. The Incident Response Planning and Operations Analyst supports cyber security wargaming and incident readiness programs, designing exercises, assessing response capabilities, coordinating stakeholders, and driving continuous improvement in cyber readiness.

What you'll do:

• Support a comprehensive cyber wargaming and incident readiness program
• Contribute to tabletop exercises with enterprise risk management and incident response strategies
• Coordinate with internal and external stakeholders to ensure exercises reflect realistic threat scenarios
• Design and facilitate cyber incident tabletop exercises, red/blue team simulations, and strategic wargames
• Develop injects, scripts, and after-action review processes
• Incorporate threat intelligence and emerging risks into exercise scenarios
• Evaluate organizational response capabilities and identify gaps in incident response plans
• Produce detailed reports and recommendations for improvement
• Track remediation efforts and maturity over time
• Work closely within Enterprise Information Security teams to identify areas of improvement
• Collaborate with IT, security operations, legal, communications, and executive leadership
• Present findings and strategic recommendations to senior leadership

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Technology, or related field
• 1 year or more in cybersecurity, with experience in incident response or threat management
• Excellent communication, facilitation, writing and analytical skills
• Some experience in influencing, designing or facilitating tabletop exercises or cyber simulations
• Ability to document and explain technical details in a concise, understandable manner
• Relevant technical and industry certifications in cybersecurity
• Good understanding of NIST, MITRE ATT&CK, and other cybersecurity frameworks
• Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience
• Knowledge in one or more security domains including Incident Response and Forensics, Security Governance and Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management
• Knowledge of cloud security, AI assisted Incident Response, DevOps, and application security
• Strong tasks and time management skills
• Japanese languages knowledge or fluency

Benefits:

• Eligible for certain discretionary performance-based bonus and/or incentive compensation
• Comprehensive health and wellness benefits
• Retirement plans
• Educational assistance and training programs
• Income replacement for qualified employees with disabilities
• Paid maternity and parental bonding leave
• Paid vacation, sick days, and holidays
• Hybrid work schedule of four days on-site and work remotely one day per week