SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.
In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
JOB SUMMARY
As a Sr. Cyber Security Analyst, you will play a key role in protecting SMBC Group by helping detect, investigate, and respond to cyber threats. You will work within the Security Operations Center (SOC) to strengthen monitoring, incident response, threat hunting, and detection capabilities across a global technology environment.
In this role, you will analyze security events, identify root causes, improve detection coverage, and help enhance security controls. You will also contribute to initiatives that advance the SOC’s capabilities through automation, threat intelligence, purple teaming, digital forensics, and incident response. This is an opportunity to work with modern security technologies, expand your expertise, and directly influence how we defend the organization.
PRINCIPAL DUTIES AND RESPONSIBILITIES
• Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across the enterprise.
• Lead technical investigations to determine root cause, assess impact, and support containment and remediation efforts.
• Conduct proactive threat hunting activities to identify emerging threats and security gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks and procedures.
• Partner with detection engineering and security automation teams to improve visibility, reduce false positives, and strengthen response processes.
• Evaluate adversary tactics, techniques, and procedures (TTPs) and validate the organization's ability to detect and respond to them.
• Support the implementation, management, and optimization of security tools and platforms.
• Contribute to projects and initiatives that improve SOC operations, incident response capabilities, and overall security maturity.
POSITION SPECIFICATIONS
• 5+ years of cybersecurity experience, preferably in a SOC, CSIRT, DFIR, or incident response environment.
• Experience investigating security incidents and analyzing complex threat activity.
• Experience documenting investigations, findings, and recommendations clearly and accurately.
• Strong understanding of security monitoring, incident detection, investigation, containment, and response processes.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and related threat analysis methodologies.
• Experience working with security technologies such as SIEM, EDR, NDR, XDR, and UEBA platforms.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory and identity-related security concepts.
• Working knowledge of cloud technologies and cloud security principles.
• Strong analytical, problem-solving, and organizational skills.
• Strong verbal and written communication skills.
• Ability to manage multiple priorities and work effectively in a results-focused environment.
• Ability to work independently and make sound decisions during security investigations.
NICE TO HAVE
• Experience in threat hunting, digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience developing or tuning security detections and response workflows.
• Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent.
• Experience working in a global enterprise or highly regulated environment, including financial services.
SMBC’s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.