Cyber Defense, Adversary Emulation

Join the Mizuho team in Cyber Defense, Adversary Emulation!

Major Duties & Responsibilities:

In this role you will report to the Head of Adversary Emulation, in the organization of the CISO. This role will play a pivotal role in safeguarding the company's digital assets and ensuring business continuity. You will be a leading member of the Cyber Defense team for Mizuho Americas Services, LLC (MAS). You will be responsible for day-to-day oversight and management of the Threat and Vulnerability Management program. You will work closely with other members of the MAS Information Security Office to actively identify and mitigate threats and vulnerabilities through various activities. You must combine hands-on experience with an understanding of theory and practice. You will also be involved with monitoring and oversight of security consultants and other supporting third parties. Your responsibilities include operational aspects of monitoring and remediating security events including working with vendors and other IT departments to address the event and escalating to senior members of the team as necessary.

• Operational Responsibilities
  • Oversee the Threat and Vulnerability Management program
  • Prioritize work amongst full time staff and third-party resources
  • Oversee tools, technologies, and processes related to threat management
  • Ensure effective reporting of security activities, reporting status, risks, issues, and escalations to senior leadership (CISO, CIO, and other senior stakeholders).
  • Manage relationship with other Security, Infrastructure, and Application teams to identify, mitigate, and remediate vulnerabilities and other threats in the environment
  • Provide expertise on Security Incidents
  • Map TTPs and CVEs to identified threats and prioritize appropriately
  • Recommend and implement enhancements to existing processes, focusing on automation and integration between other security tools.
  • Ensure comprehensive threat identification of the entire Mizuho enterprise
  • Review daily, weekly, and monthly security reports for any anomalies or issues
  • Maintain documentation on security architecture, procedures, configurations

• Project based work
  • Provide feedback to MAS teams to implement well engineered solutions to improve security posture
  • Identify workflow areas to proactively address potential vulnerabilities
  • Work with colleagues and vendors to assess different technologies and determine their impact within the Mizuho environment
  • Provide security requirements for the design, development, engineering, and implementation of hardware, networks, and applications
  • Conduct lessons learned exercises and RCAs after security incidents, detection of major system vulnerabilities, and ongoing compliance violations
  • Analyze threat intelligence, vulnerability and security assessments; produce vulnerability reports and work with IT teams to correct or mitigate found deficiencies

Qualifications & Requirements:

• At least 10+ years security domain related experience, preferably within a financial services firm
• 5+ years of experience in a similar position.
• Proven experience in a vulnerability management program within a large enterprise.
• Strong understanding of cybersecurity risk management and information security standards (SOX, NIST, FISMA, etc.)
• Ability to manage and use various scanning technologies across different layers of the tech stack, such as SAST, DAST, cloud infrastructure
• Strong understanding of OWASP and other common Application Security issues and frameworks.
• Fundamental understanding of vulnerability reporting and management processes or tools
• Solid grasp and understanding of vulnerability scoring and classification methodologies
• Excellent communication and leadership skills, with the ability to manage and prioritize multiple projects and initiatives.
• Strong knowledge of internet, web, application and network security platforms.
• Strong knowledge of Linux & Windows operating system and security functions
• Strong knowledge of Cloud Deployment and management
• Develop, document, and maintain policies, procedures, and training plans for system administration and appropriate use
• Strong written and verbal communication skills. Ability to clearly articulate ideas, solutions etc.
• Educational background with BS / MS in Information Technology, Computer Science, Engineering or related area.

Additional Qualifications:

• Possess security certifications (CISSP, CISM, CISA, GSEC, etc.)
• Experience with project management and industry best practices
• Experience working within the Financial Services industry
• Experi