Security Architect

Join Mizuho as a Security Architect!

In this role you will manage and maintain the Firm's security program. You will need to pro‑actively evaluate applications and infrastructure components within the enterprise to identify security risks, recommend solutions, work with affected departments to address the risk, and ensure that the solutions remain in effect. You must have extensive hands‑on experience supplemented by an understanding of theory and practice.

Your responsibilities will include security for all areas of IT including servers, networks, desktops, cloud, third‑party services and application development.

• Work with a group of Security and Enterprise Architects implement technical solutions and provide operational capabilities.
• Project manage security initiatives and provide project oversight of all security projects.
• Provide oversight and technical direction for security initiatives.
• Provide oversight and guidance on technical and security design of enterprise initiatives and business applications.
• Provide overall technical design & architecture for all aspects of security in the infrastructure.
• Need to be hands‑on both from a mentoring standpoint, as well as from an execution of tasks when team members are not available standpoint.
• Supervise third‑party vendors for various projects or services.
• Create operational capabilities within the security organization.
• Review technology platforms, identify deficiencies, recommend and implement improvements.
• Work with vendors and colleagues to assess different technologies and determine their impact on security.
• Troubleshoot security issues and assist with security incident responses and forensic investigations.
• Prepare risk reports to senior management including security incidents, system vulnerabilities, and ongoing compliance functions.

• Strong hands‑on technical experience in the security domain. .i.e. must have hands‑on experience with some of the key security technologies – IDS, SIEM, Network Security, Application Security, Endpoint Security.
• Experience with threat modeling, penetration testing, or running security scans with third‑party software.
• Experience working with IP networking, networking protocols and understanding of security related technologies including Encryption, VPNs, PKI, Firewalls, IDS, Proxies, NAC, SIEM, AV, DNS, Email, Wireless.
• Experience working with leading firewall, network scanning, and intrusion detection products and authentication technologies.
• Experiences with Cloud design and application migrations – Azure, AWS, or GCP.
• Strong written and verbal communication skills. Ability to clearly articulate ideas, solutions etc.
• Organized with Strong Project Management skills.
• Self‑driven – Ability to lead projects from initiation to completion.
• Educational background with BS / MS in Computer Science, Engineering or related area.
• Strong knowledge of internet, web, application and network security platforms.
• Strong knowledge of Linux & Windows operating system security.
• 4+ years' of experience in a similar position.
• Excellent analytical and problem solving skills to troubleshoot and resolve security issues.
• Ability to perform and interpret vulnerability assessments.
• Ability to balance and prioritize work.
• Some scripting experience is necessary.

• Possess security certifications (CISSP, CISM, CISA, GSEC, etc.).
• On‑Prem to Cloud Migration Experience.
• Experience with project management and industry best practices.
• Experience working within the Financial Services industry.

Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in‑office requirements that will be communicated to you as part of the recruitment process.

The expected base salary ranges from $111k-$190k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also…