Security Engineering - Analyst

Overview

Hands-on Cyber Security Analyst role supporting the day-to-day operation, monitoring and support of cybersecurity controls, with a focus on network security across the EMEA Bank and EMEA Securities technology estate.

What you'll do

• Support the operation, monitoring and ongoing maintenance of network security platforms across the EMEA Bank and EMEA Securities technology estate.
• Support security incidents, assist with investigations and contribute to remediation activities.
• Support security-related changes in line with established change and governance processes.
• Act as a supporting point of contact for internal audit, IT risk and security governance teams, assisting with alignment to ISO 27001, SAMA, SWIFT CSCF and internal security standards.
• Work with senior engineers, vendors and internal teams to support implementation and continuous improvement of network security controls.
• Identify potential security risks posed by threat actors and gaps in existing deployments.
• Collaborate with internal teams and vendors to develop mitigation plans and track remediation progress through ServiceNow.
• Support the organisation's security risk profile and associated operational risk reporting.
• Support continuous improvement of operational processes and workflows, and identify opportunities for efficiencies, automation or standardisation.
• Support internal and external audits by ensuring activities are documented and accessible in central repositories.
• Align improvements and mitigation activities with organisational risk policies and governance frameworks.
• Maintain accurate documentation, procedures and evidence to support operational, audit and governance requirements.

What you'll need

• Strong secondary-level education, ideally to A-level or equivalent, in a technical or analytical discipline; a university degree is not essential.
• 2 to 4 years of experience in cyber security or information security roles.
• Good experience in network security operations, with an understanding of TCP/IP, routing, switching and traffic-flow analysis.
• Hands-on experience supporting perimeter security controls, including next-generation firewalls and intrusion prevention systems (IPS).
• Experience working with cloud-based edge security platforms, including exposure to WAF, DDoS protection and Zero Trust / ZTNA capabilities.
• Experience supporting web security and Secure Web Gateway (SWG) or proxy solutions, including URL filtering, SSL inspection and user-based access controls.
• Exposure to network visibility and microsegmentation tools, including application dependency mapping and east-west traffic analysis.
• Experience supporting network security policy management processes, including firewall rule changes, reviews and compliance activities.
• Experience working in multi-vendor network security environments, supporting integrations across diverse firewall and security platforms.
• Exposure to cloud network security concepts, including VPC/VNet security, security groups and integration with cloud-native security controls.
• Familiarity with Network Access Control (NAC) solutions such as Cisco ISE or similar.
• Good understanding of security best practices, including Zero Trust principles, least-privilege access and network segmentation strategies.
• Strong technical experience in Windows Server and Linux environments.
• Strong technical understanding of infrastructure, networking and operating systems.
• Hands-on experience with one or more enterprise cyber security tools.
• Knowledge of regulatory frameworks (e.g., ISO 27001, CIS, NIST).
• Comfortable supporting log analysis, access control configurations and data protection tools.
• Proficiency in troubleshooting integrated systems involving AD, DNS, GPO and networked assets.
• Excellent written and verbal communication skills for technical and non-technical audiences.
• Experience collaborating with audit, risk and compliance stakeholders.
• Process-oriented with keen attention to detail.

Nice to have

• Scripting or automation exposure (Python, Ansible or PowerShell).
• A qualification in Cyber Security, Information Technology, Risk Management or a related field.
• Security+, CEH or equivalent foundational security certifications.
• Vendor or platform certifications (e.g., Microsoft, AWS).
• Experience working with cloud platforms (Azure, AWS) or virtualised environments (e.g., VMware).
• Familiarity with ServiceNow ITSM.
• Knowledge of security frameworks such as CIS Benchmarks, ISO 27001 or NIST 800-53.

Details

• Location: MUFG Global Service Private Ltd., Bengaluru (BCIT).