Lead Security Engineer - Vulnerability Management

About the position

As a Lead Security Engineer at JPMorgan Chase, you will play a crucial role in ensuring the security of the company's global infrastructure. You will be part of a high-performing team within the Cybersecurity & Technology Controls division, responsible for deploying and managing advanced vulnerability scanning tools. Your work will involve conducting comprehensive security assessments across both on-premise and cloud environments, while also contributing to the evolution of security protocols and practices within the organization.

Responsibilities

• Deploy, configure, and manage vulnerability scanning tools for comprehensive security assessments.
• Develop and maintain firewall rules and access requests for secure scanning operations.
• Execute creative security solutions and troubleshoot technical issues effectively.
• Develop secure scripts and automation tools to enhance vulnerability scanning processes.
• Minimize security vulnerabilities by evolving security protocols based on industry insights and regulations.
• Collaborate with stakeholders to understand security needs and recommend modifications to the vulnerability management program.
• Foster a team culture of diversity, equity, inclusion, and respect.

Requirements

• Formal training or certification in software engineering concepts with 5+ years of experience in security engineering solutions.
• Experience with deploying and managing vulnerability scanning tools in on-premise and cloud environments.
• Strong networking skills, including knowledge of firewall configurations and network protocols.
• Experience with automation tools and frameworks for vulnerability management processes.
• Proficient in all aspects of the Software Development Life Cycle.
• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
• Experience with threat modeling, discovery, vulnerability, and penetration testing.
• Skilled in planning, designing, and implementing enterprise-level security solutions.

Nice-to-haves

• Experience communicating effectively with senior business leaders.
• Familiarity with on-premise and cloud-based security architectures.
• Experience with security compliance frameworks such as PCI-DSS, ISO 27001, and NIST.
• Strong understanding of network security principles and practices.
• Knowledge of secure coding practices and secure software development lifecycle (SDLC).
• Certifications such as CISSP, CEH, or GIAC are a plus.

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching