MUFG Investor Services is hiring a DevSecOps Engineer

Responsibilities

• Promote a security-first mindset throughout the organization to embed security into system design from the outset.
• Assist in detecting and evaluating security flaws in web applications to minimize organizational risk.
• Manage application security tools on a daily basis to ensure full visibility, compliance, and timely resolution of identified issues.
• Perform threat modeling and evaluate system designs to detect security risks during early development stages.
• Deploy security controls and preventive strategies to reduce the likelihood of security breaches.
• Integrate and maintain static and software composition analysis tools across code repositories to detect vulnerabilities in source code.
• Expand dynamic application security testing automation to improve coverage and monitor runtime security health.
• Offer expert security input and actionable remediation recommendations to development teams as needed.
• Execute internal penetration tests on proprietary applications to uncover security weaknesses.
• Evaluate third-party software security through configuration audits and hardening assessments.
• Confirm that reported security vulnerabilities are properly addressed by internal teams and external vendors.
• Organize and manage third-party penetration testing engagements for independent security validation.
• Foster strong working relationships with engineering and IT departments to integrate security practices effectively.