Monitoring & Incident Management Senior Security Analyst

Join Mizuho as a Monitoring & Incident Management Senior Security Analyst!

Major Duties & Responsibilities:

The Senior Security Analyst within the Monitoring & Incident Management team will report within the Cyber Defense tower in the organization of the CISO. This role will play a pivotal role in safeguarding the company's digital assets and ensuring business continuity. The candidate will be a leading member of the Cyber Defense Monitoring and Incident Management team for Mizuho Americas Services, LLC (MAS). They will be responsible for managing the broader Monitoring & Incident Management activities and their various responsibilities. 

• Operational Responsibilities
  • Coordinate work across the Monitoring & Incident Management team, ensuring 24/7 incident response readiness.
  • Prioritize work amongst full time staff and third party resources
  • Oversee tools, technologies, and processes related to security operations, including Vulnerability Management, Data Loss Prevention, EDR/NDR/XDR
  • Ensure effective reporting of security activities, reporting status, risks, issues, and escalations to senior leadership (CISO, CIO, and other senior stakeholders).
  • Perform day to day administration and support of security infrastructure tools and systems, including but not limited to SIEM, IDS/IPS, Anti-Virus, Anti-Malware, DLP, and other Network or System Monitoring tools
  • Manage relationship with SOC, MSSP, TPRM, and other security vendors
  • Provide expertise on Security Incidents
  • Recommend and implement enhancements to existing processes, focusing on automation and integration between other security tools.
  • Review security logs of critical systems to identify risks, security threats, or configuration errors
  • Review daily, weekly, and monthly security reports for any anomalies or issues
  • Provide first level support on security issues and guidelines from end-users, developers, desktop-support specialists and system administrators
  • Troubleshoot security issues and assist with security incident responses and forensic investigations
  • Maintain documentation on security architecture, procedures, configurations
  • Create and update Incident Response documentation, IR Playbooks, KRI\KPIs, and other related items for Senior Management
  • Serve as incident commander during incident response activities

• Project based work
  • Provide feedback to MAS teams to implement well engineered solutions to improve security posture
  • Work with colleagues and vendors to assess different technologies and determine their impact within the Mizuho environment
  • Provide security requirements for the design, development, engineering, and implementation of hardware, networks, and applications
  • Conduct lessons learned exercises and RCAs after security incidents, detection of major system vulnerabilities, and ongoing compliance violations
  • Analyze threat intelligence, vulnerability and security assessments; produce vulnerability reports and work with IT teams to correct or mitigate found deficiencies

Qualifications & Requirements:

• At least 10+ years security domain related experience, preferably within a financial services firm
• 5+ years of experience in a similar position.
• Proven experience in leading security operations within a large enterprise.
• Strong understanding of cybersecurity risk management and information security standards.
• Excellent communication and leadership skills, with the ability to manage and prioritize multiple projects and initiatives.
• Educational background with BS / MS in Information Technology, Computer Science, Engineering or related area.
• Strong written and verbal communication skills. Ability to clearly articulate ideas, solutions etc.
• Strong knowledge of internet, web, application and network security platforms.
• Strong knowledge of Linux & Windows operating system and security functions
• Ability to perform and interpret vulnerability assessments

Additional Qualifications:

• Possess security certifications (CISSP, CISM, CISA, GSEC, etc.)
• Experience with project management and industry best practices
• Experience working within the Financial Services industry
• Experience in support projects and able to handle issues against defined SLA / KPI
• Clear communication & presentation skills, and the ability to articulate complex issues concisely
• Leadership, relationship-building and influencing skills to drive agendas across a number of teams
• Proven track record of effectively interacting with senior management
• Ability to work strategically and collaboratively across departments