Incident Response Planning and Operations, Analyst

Tempe, AZ

Full-time

Hybrid

$85K/yr - $123K/yr

Entry Level

MUFG is a global financial group focused on serving clients, organizations, and communities through trusted financial services. The Incident Response Planning and Operations Analyst will support cyber security wargaming and incident readiness programs, design and facilitate exercises, assess response capabilities, and coordinate with stakeholders to improve cyber readiness.

Apply Now

Responsibilities

Support a comprehensive cyber wargaming and incident readiness program
Contribute to tabletop exercises with enterprise risk management and incident response strategies
Coordinate with internal and external stakeholders to ensure exercises reflect realistic threat scenarios
Design and facilitate cyber incident tabletop exercises, red/blue team simulations, and strategic wargames
Develop injects, scripts, and after-action review processes
Incorporate threat intelligence and emerging risks into exercise scenarios
Evaluate organizational response capabilities and identify gaps in incident response plans
Produce detailed reports and recommendations for improvement
Track remediation efforts and maturity over time
Work closely within Enterprise Information Security teams to identify areas of improvement
Collaborate with IT, security operations, legal, communications, and executive leadership
Present findings and strategic recommendations to senior leadership
Monitor trends in cyber threats and incident response best practices
Integrate lessons learned from real incidents and exercises into future planning

Qualification

Required

Bachelor's degree in Cybersecurity, Information Technology, or related field
1 year or more in cybersecurity, with experience in incident response or threat management
Excellent communication, facilitation, writing and analytical skills
Some experience in influencing, designing or facilitating tabletop exercises or cyber simulations
Ability to document and explain technical details in a concise, understandable manner
Relevant technical and industry certifications in cybersecurity
Good understanding of NIST, MITRE ATT&CK, and other cybersecurity frameworks
Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience

Preferred

Knowledge in one or more security domains including Incident Response and Forensics, Security Governance and Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management
Knowledge of cloud security, AI assisted Incident Response, DevOps, and application security
Strong tasks and time management skills
Japanese languages knowledge or fluency
Knowledge of the various types of cyber-attacks and their implementations
Experience in operational processes such as security monitoring, data correlation, troubleshooting, security operations, etc
Experience with information security risk management, including information security audits, reviews, and risk assessments
Ability to work cross-functionally and influence without direct authority
Prior work experience in a global company or financial industry

Benefits

This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation.
Comprehensive health and wellness benefits
Retirement plans
Educational assistance and training programs
Income replacement for qualified employees with disabilities
Paid maternity and parental bonding leave
Paid vacation, sick days, and holidays
Our hybrid work schedule is four days on-site and work remotely one day per week.

MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups.

Glassdoor