DevSecOps Engineer

Job summary

MUFG is seeking a proactive and collaborative Application Security Engineer to enhance the security of applications, APIs, and infrastructure. The role involves implementing preventative controls, conducting security testing, and fostering a secure by design approach across the business.

Qualifications

• Experience in the financial sector or heavily audited industry
• Experience with cloud services, particularly AWS
• Experience with Infrastructure as Code, Kubernetes, and Containers
• Experience with auth mechanisms like Open ID Connect, OAuth
• Experience in creating custom CI/CD pipeline jobs for security reviews

Responsibilities

• Act as a security champion to foster a secure by design approach
• Identify and analyze web application security vulnerabilities
• Manage application security platforms for compliance and remediation
• Conduct threat modeling and review application architectures
• Implement application security controls and proactive measures
• Manage SAST/SCA tooling to identify source code risks
• Scale automated DAST solutions for testing coverage
• Provide security guidance and remediation advice to engineers
• Conduct penetration testing on internally developed applications
• Review security of third-party vendor applications
• Validate remediation of security issues by development teams
• Coordinate external penetration testing assessments
• Collaborate with development and IT teams

Skills

Relocation