JPMorgan Chase - Columbus, OH
posted 2 months ago
Full-time - Mid Level
Columbus, OH
Credit Intermediation and Related Activities
About the position
As a Lead Security Engineer at JPMorgan Chase, you will play a crucial role in ensuring the security of the company's global infrastructure. You will be part of a high-performing team within the Cybersecurity & Technology Controls division, responsible for deploying and managing advanced vulnerability scanning tools. Your work will involve conducting comprehensive security assessments across both on-premise and cloud environments, while also contributing to the evolution of security protocols and practices within the organization.
Responsibilities
- Deploy, configure, and manage vulnerability scanning tools for comprehensive security assessments.
- Develop and maintain firewall rules and access requests for secure scanning operations.
- Execute creative security solutions and troubleshoot technical issues effectively.
- Develop secure scripts and automation tools to enhance vulnerability scanning processes.
- Minimize security vulnerabilities by evolving security protocols based on industry insights and regulations.
- Collaborate with stakeholders to understand security needs and recommend modifications to the vulnerability management program.
- Foster a team culture of diversity, equity, inclusion, and respect.
Requirements
- Formal training or certification in software engineering concepts with 5+ years of experience in security engineering solutions.
- Experience with deploying and managing vulnerability scanning tools in on-premise and cloud environments.
- Strong networking skills, including knowledge of firewall configurations and network protocols.
- Experience with automation tools and frameworks for vulnerability management processes.
- Proficient in all aspects of the Software Development Life Cycle.
- Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
- Experience with threat modeling, discovery, vulnerability, and penetration testing.
- Skilled in planning, designing, and implementing enterprise-level security solutions.
Nice-to-haves
- Experience communicating effectively with senior business leaders.
- Familiarity with on-premise and cloud-based security architectures.
- Experience with security compliance frameworks such as PCI-DSS, ISO 27001, and NIST.
- Strong understanding of network security principles and practices.
- Knowledge of secure coding practices and secure software development lifecycle (SDLC).
- Certifications such as CISSP, CEH, or GIAC are a plus.
Benefits
- Comprehensive health care coverage
- On-site health and wellness centers
- Retirement savings plan
- Backup childcare
- Tuition reimbursement
- Mental health support
- Financial coaching
