Cyber Security Analyst - Vulnerability Management - Associate Job Level: Associate Location: Charlotte, NC, US, 28202 Employment Type: Full Time Requisition ID: 6317 Hybrid Job Description: SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges. In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd. Role Description As a Vulnerability Management Analyst, you will be a key part of a high performing SOC team, with a desire to continually improve and advance our capabilities to protect SMBC Group. You will bring your passion for Cybersecurity to a team of dedicated professionals and leverage this passion to ensure our vulnerability remediation activities are effective and efficient and that we keep pace with a rapidly changing threat landscape. You will help protect the Bank's networks, applications, and infrastructure by working with IT owners to identify and mitigate risks that may be targeted by threat groups. The Vulnerability Management team is responsible for working with relevant stakeholders to identify, analyze, mitigate, and report on vulnerabilities. The goal is to take a proactive and risk-based approach to identifying and addressing gaps within SMBC to protect the Bank's network and data from a cyber-attack and in turn, protect its reputation and the trust of customers. In this role, you will be responsible for configuring scans, researching the latest threats, analyzing large datasets, conducting risk assessments, coordinating remediation of identified risks, and reporting on compliance levels and opportunities for improvement across the enterprise. Due to the rapidly growing technological footprint and threat landscape, this role requires a quick learner that is proactive, analytical, diligent, and organized. The role will require interaction with various teams to effectively communicate and address risk and promote the use of secure technologies in line with security standards. The role offers the opportunity for a security professional to work in a challenging and complex enterprise environment, using leading edge tools and technologies. Role Objectives - Triage vulnerability alerts from security tools, external intelligence providers, penetration tests, and user-reported findings to assess impact to organization - Configure network, infrastructure, and/or application vulnerability scans and policy checks and conduct manual testing as needed to validate findings - Liaise with various business units to conduct vulnerability assessments, consult on risk reduction strategies, and supervise remediation such that vulnerabilities are addressed within required timelines - Conduct attack surface risk modeling and articulate high-risk areas to stakeholders in collaboration with Threat Intelligence and Threat Hunting functions - Assist in production of periodic vulnerability management reports and statistics for management - Tune vulnerability management tools to increase coverage, reduce false positives and false negatives, and improve processes - Liaise with Optimization team to set up detections and mitigations i.e., Intrusion Prevention Systems, ensuring we have signatures in place to protect us from relevant threats - Support culture of continuous improvement by proactively investigating new risks and opportunities to strengthen Bank's security posture Qualifications and Skills - 2+ years of cybersecurity, IT, or related experience - Bachelor of Information Technology, Computer Science, or similar preferable - Strong understanding of MITRE ATT&CK framework, common vulnerabilities, and exploits - Strong analytical and problem-solving abilities - Understanding of networking concepts and common operating systems - Ability to analyze large datasets, multi-task, and effectively prioritize tasks - Strong interpersonal and communication skills (written and verbal) - Ability to multi-task and remain productive in a dynamic, service-driven and results oriented environment - Ability to script tasks and automate processes is a plus - Working knowledge of cloud technologies and containerized environments is a plus Additional Requirements SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required. Nearest Major Market: Charlotte

• Dedicated to the operation of monitoring and managed response (MSS/MDR) • Monitor, triage, and investigate alerts and incidents in OT/ICS environments • Conduct root cause analyses for events involving PLCs, HMIs, and RTUs • Correlate OT events with IT telemetry • Support the Detection Engineering team in building and refining use cases • Maintain and evolve clients' OT asset inventories • Participate in OT vulnerability management cycles • Serve as the technical point of contact in meetings with industrial clients • Produce technical and executive reports on investigations conducted

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Junior Analyst, Customer Compliance & Fraud Overview:• Demonstrated ability to communicate and interact cooperatively in a team environment;• Demonstrated initiative in developing relationships with internal partners across compliance areas and curiosity to navigate the organization to find internal resources;• Strong analytical skills, with ability to work with large datasets, identify patterns, and generate actionable insights;• Working knowledge of SQL, Data Warehousing (DWH) concepts, and data visualization tools such as Power BI;• Ability to support data mining analysis, identifying behavior patterns, business opportunities, and tracking progress of action plans;• Basic understanding of fraud prevention and compliance principles, with interest in developing expertise in risk management and regulatory frameworks;• Interest or exposure to emerging technologies such as Generative AI (e.g., Microsoft Copilot Studio or similar tools) to enhance data analysis, automation, and productivity;Role:• Support the execution of monitoring processes to assess adherence to fraud prevention, compliance, and regulatory requirements;• Review and analyze customer regulatory, compliance, and fraud-related data using SQL and data tools, identifying trends, anomalies, and potential risks;• Assist in the development of dashboards and reports (e.g., Power BI) to support fraud monitoring and compliance oversight;• Support customer meetings by preparing data-driven insights and contributing to recommendations to mitigate fraud and compliance risks;• Assist in investigating potential risks and suspicious behaviors through structured data analysis, escalating findings when appropriate;• Work closely with internal teams to improve visibility into fraud trends, compliance gaps, and operational performance;• Explore opportunities to leverage Generative AI tools (e.g., Copilot Studio) to support data analysis, process automation, and reporting efficiency, under guidance from senior team members;All About You:• Strong analytical mindset, with ability to interpret data and identify patterns related to fraud, risk, and compliance;• Foundational experience with SQL and data analysis; exposure to Power BI or similar tools is preferred;• Familiarity or academic/professional exposure to fraud prevention, risk management, or compliance is highly desirable;• Exposure to tools such as Excel and/or Python (e.g., Jupyter Notebooks) is a plus;• High attention to detail and curiosity to investigate anomalies and unusual patterns in data;• Ability to translate data findings into clear insights, with guidance from senior team members;• Proactive attitude, eagerness to learn, and interest in building expertise in fraud detection and compliance analytics;• Interest or hands-on exposure to Generative AI tools (e.g., Copilot Studio, ChatGPT, or similar platforms) to support analytics, automation, and workflow optimization is considered a plus;• Fluency in English and Portuguese is required; Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: - Abide by Mastercard's security policies and practices; - Ensure the confidentiality and integrity of the information being accessed; - Report any suspected information security violation or breach, and - Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

Role Description We are seeking an experienced Security Operations Center (SOC) Information Security Analyst to support a large enterprise cybersecurity team. This role is responsible for monitoring, analyzing, and responding to security events and incidents while helping strengthen the organization's overall security posture. The ideal candidate will possess hands-on experience with security monitoring tools, incident response processes, threat hunting activities, and threat intelligence analysis. The candidate should be comfortable communicating technical findings to both technical and non-technical stakeholders. Qualifications - Minimum 2 years of experience working as a SOC Analyst, Information Security Analyst, or similar cybersecurity role. - Strong understanding of networking concepts including: - TCP/IP - DNS - Routing and Switching - Ping and Traceroute - NTP - TLS/SSL - Experience investigating and responding to security incidents. - Knowledge of threat detection, threat hunting, and incident response methodologies. - Experience working with Security Information and Event Management (SIEM) platforms. - Strong analytical and problem-solving skills. - Excellent verbal and written communication skills. Requirements - Experience with Microsoft security technologies including: - Azure - Entra ID - Microsoft Sentinel - Microsoft Defender - Experience with CrowdStrike or similar Endpoint Detection and Response (EDR) solutions. - Familiarity with threat intelligence platforms and industry security frameworks. - Experience creating security procedures, runbooks, and incident response documentation.