Covert Red Team Operator

Testing Site - JPMC; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

JPMorganChase is expanding its Cybersecurity Red Team to enhance its defenses through rigorous, multi-month red team operations. The role demands delivering covert assessments, crafting robust methodologies, and producing detailed reports with actionable remediation.

You will engage across global teams, using threat intel to refine risk management and detection strategies. The ideal candidate has 3+ years in red teaming and deep expertise in networks, OS, cloud, and post-exploitation techniques,

Qualifications

• 3+ years of covert red teaming or network exploitation using industry-standard tools such as Cobalt Strike, with op-sec awareness and detection evasion.
• Demonstrable expertise in security domains including networks, operating systems, applications, cloud/DevOps security, Active Directory, physical security or social engineering.
• Ability to identify systemic security or resiliency issues with recommendations for enhancements or remediation.
• Experience developing implants, loaders, or post-exploitation tools for covert red team engagements.
• Active involvement in the offensive security community (blogs, conferences, OSS contributions).
• Excellent communication, collaboration, and report writing skills to influence senior leadership across functions.
• Ability to collaborate with high-performing global teams to accomplish common goals.

Responsibilities

• Conduct multi-month covert red team assessments against JPMorganChase and subsidiaries to evaluate controls and operational risk.
• Contribute to development and enhancement of assessment methodologies, tools, and frameworks to strengthen the firm’s security posture.
• Create comprehensive assessment reports with findings, risk assessments, and remediation recommendations for cross-functional audiences.
• Utilize threat intelligence and security research to stay informed about emerging threats and apply knowledge to risk management.

Skills

Red Team ops

Network exploitation

Threat awareness

Post-exploitation tooling

Offensive security community

Communication

Global collaboration

Education

Offensive Security / CREST / SANS certs

Tools

Cobalt Strike

Job description

JPMorganChase is expanding its Cybersecurity Red Team to enhance its defenses through rigorous, multi-month red team operations. The role demands delivering covert assessments, crafting robust methodologies, and producing detailed reports with actionable remediation.

You will engage across global teams, using threat intel to refine risk management and detection strategies. The ideal candidate has 3+ years in red teaming and deep expertise in networks, OS, cloud, and post-exploitation techniques,