Incident Response Lead Analyst

About Us:MUFG Bank, Ltd. is Japan’s premier bank, with a global network spanning in more than 40 markets. Outside of Japan, the bank offers an extensive scope of commercial and investment banking products and services to businesses, governments, and individuals worldwide. MUFG Bank’s parent, Mitsubishi UFJ Financial Group, Inc. (MUFG) is one of the world’s leading financial groups. Headquartered in Tokyo and with over 360 years of history, the Group has about 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. The Group aims to be the world’s most trusted financial group through close collaboration among our operating companies and flexibly respond to all the financial needs of our customers, serving society, and fostering shared and sustainable growth for a better world. MUFG’s shares trade on the Tokyo, Nagoya, and New York stock exchanges.MUFG Global Service Private Limited:Established in 2020, MUFG Global Service Private Limited (MGS) is 100% subsidiary of MUFG having offices in Bengaluru and Mumbai. MGS India has been set up as a Global Capability Centre / Centre of Excellence to provide support services across various functions such as IT, KYC/ AML, Credit, Operations etc. to MUFG Bank offices globally. MGS India has plans to significantly ramp-up its growth over the next 18-24 months while servicing MUFG’s global network across Americas, EMEA and Asia Pacific.About the Role:Position Title: Incident Response Engineer Corporate Title: AnalystReporting to: DirectorLocation: Bengaluru Shift Timing: 1:00PM - 10:00 PM IST (Need to be flexible) Job Profile:Roles and Responsibilities:Operate under the Incident Response (IR) function, reporting to the IR Lead, with responsibility for leading investigations into high-severity security incidentsManage and coordinate end-to-end incident response activities, ensuring timely containment, eradication, and recoveryProvide technical leadership and guidance to SOC and IR team members during active investigationsCollaborate closely with the Global Incident Response team to assess cross-regional impact and coordinate response effortsWork in partnership with Threat Intelligence, Threat Hunting, SOC, and other cybersecurity teams to ensure efficient and effective incident handlingServe as the primary technical liaison for incident status updates required by regulatory bodies, audit teams, and executive stakeholdersDevelop, maintain, and continuously improve IR playbooks, workflows, and escalation protocolsDrive post-incident reviews and lessons learned sessions to enhance response capabilities and reduce future riskRepresent the IR function in cross-functional cyber governance and risk forums.Ensure all IR activities comply with applicable laws, regulations, and industry standardsProvide out-of-hours support as part of the IR leadership rotation when necessaryJob Requirements:Minimum 5 years of dedicated experience in an Incident Response role within an established SOC environmentStrong analytical skills and hands-on experience with SIEM platformsDeep understanding of attacker tactics, techniques, and procedures (TTPs) across diverse infrastructuresFamiliarity with industry-standard IR frameworks (e.G., NIST, SANS, MITRE ATT&CK)Experience in both network-based and host-based threat analyticsStrong knowledge of security infrastructure and mitigation strategiesProficiency in query languages (e.G., Splunk SPL, CrowdStrike Query Language) for threat analysisExcellent communication skills, with the ability to translate technical findings for non-technical stakeholdersThorough understanding of international security standards and control frameworks (e.G., ISO 27001, NIST CSF)Relevant certifications such as GCIH, GCFA, GMON, are desirableEqual Opportunity Employer:The MUFG Group is committed to providing equal employment opportunities to all applicants and employees and does not discriminate on the basis of race, colour, national origin, physical appearance, religion, gender expression, gender identity, sex, age, ancestry, marital status, disability, medical condition, sexual orientation, genetic information, or any other protected status of an individual or that individual's associates or relatives, or any other classification protected by the applicable laws.