Assessments & Exercises - Cybersecurity Solutions Engineer

J.P. Morgan; New York (NY); On-site; USD 130,000 - 210,000; Full time

Benefits offered by this job

Competitive base salary

Incentive compensation (commission/dis

Health care coverage

Retirement savings plan

Tuition reimbursement

Mental health support

Job summary

JPMorgan Chase & Co. seeks a Findings Analysis and Solutions Team (FAST) professional to investigate security issues uncovered by Red Team and other assessments.

You will translate findings into actionable insights, engage with stakeholders, and drive innovative, AI-assisted remediation strategies within a large enterprise environment. The role emphasizes hands-on cyber operations experience, collaboration with senior leaders, and a strong drive to solve complex cybersecurity challenges across

Qualifications

• 5+ years of Cybersecurity experience in operator/analyst roles.
• Hands-on cyber operations experience (SOC, threat hunting, incident response, pentesting, red teaming).
• Strong written and verbal communication; ability to present to senior leaders.

Responsibilities

• Assess impact of vulnerabilities using data-driven risk prioritization.
• Conduct root cause analysis of security issues across technologies.
• Collaborate with stakeholders to improve security posture.
• Identify and implement technical, procedural, or educational solutions to mitigate issues.
• Present findings clearly to technical and non-technical audiences, including executives.
• Prioritize remediation using multiple criteria to maximize impact.
• Leverage enterprise AI capabilities to support assessment workflows and reporting.
• Drive reuse-first AI-assisted workflows for control evaluation and reporting.

Skills

Cybersecurity experience

Operator/analyst

Threat hunting

Incident response

Red teaming

Stakeholder engagement

AI capabilities

Data privacy

Tools

Python

C

JavaScript

VBScript

SIEM

SOAR

EDR/XDR

Job description

Are you passionate about addressing cyber issues and driving innovative solutions? Do you excel in both technical and non-technical analysis, root cause evaluation, stakeholder engagement, and novel approaches to problem-solving? If this sounds like you, apply to join the Findings Analysis and Solutions Team (FAST) within JPMC's Cybersecurity & Technology Controls (CTC) organization to tackle these challenges on a massive scale. In this role, you will investigate security issues uncovered by our Red Team and other Assessments and Operations teams to understand the core problems and help solve them at both a tactical and operational level. We are especially interested in candidates who bring hands-on operator and analyst experience from cyber operations roles such as a SOC, threat hunting, incident response, penetration testing, or red teaming. The ideal candidate will be self-motivated, possess extensive technical curiosity, have a drive to understand complex cybersecurity issues, and be able to collaborate with both technical and non-technical peers.

Key Responsibilities:

• Assess the potential impact of vulnerabilities on business and technology operations using data-driven risk prioritization.
• Conduct root cause analysis (RCA) of security issues identified during assessments, incidents, and operations across various technologies, and transform your findings into actionable insights.
• Collaborate with stakeholders throughout the firm to understand, address findings, and achieve the common goal of improving the security posture of the firm.
• Identify, design, and implement technical, procedural, educational, or other solutions to effectively mitigate security issues.
• Present analysis, insights, and conclusions to both technical and non-technical audiences, including senior leaders, ensuring clarity and understanding.
• Prioritize remediation efforts using multiple criteria to ensure the most worthwhile issues are addressed first.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of test evidence and draft executive-ready assessment reporting, validating outputs and handling data according to sensitivity and security requirements.
• Drives reuse-first adoption of AI-assisted workflows for control evaluation and reporting automation, ensuring results are validated and aligned to security, resiliency, and compliance expectations.

Required qualifications, capabilities, and skills:

• Formal training or certificate with 5+ years of Cybersecurity experience, including hands-on time in an operator or analyst role.
• Experience developing tactical, operational, and strategic tools and capabilities. An insatiable technical curiosity about all things Cyber and a desire to expand your skillset.
• Demonstrated ability to be proactive and resourceful, identifying and using appropriate sources for data-driven investigations.
• Hands-on operator and/or analyst experience in cyber operations, such as SOC operations, threat hunting, detection and response, penetration testing, red teaming, or incident response, with working knowledge of related disciplines (Threat Intelligence, Risk Management, Cyber Engineering, Cyber Architecture, and Data Privacy). Familiarity with network architecture concepts, including cloud architectures, and deploying large-scale applications in an enterprise environment.
• Experience in building analytical processes, templates, and documentation. Strong written and verbal communication skills; ability to understand complex problems and present them simply.
• Ability to collaborate with high-performing teams, senior leaders, business stakeholders, third-party vendors, and technical individuals throughout the firm to effectively articulate risk and drive change. A strong commitment to ethical practices and doing what is right.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support assessment workflows (e.g., analysis support and report drafting) with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted findings and remediation recommendations before use, escalating when uncertain and following security and data handling requirements.

Preferred qualifications, capabilities, and skills:

• Coding (scripting) experience (e.g., Python, C, JavaScript, VBScript).
• Experience with enterprise level security technologies like firewalls, IDS/IPS, web proxies, DLP, SIEM, SOAR, EDR/XDR, and others.
• ==wM1AiOyVGdpVncjVmcgUGa0BCbsVGV
• ==wMzQzM0MDMyE2MycTN2QzN5YTN3IzNzYTN2IzNwITN2gjN0cDMyMmNjZTN2QTN
• Q0FMR19SQzQgIktlZXAgZ29pbmcuLi4i
• 802468e99cea9ff353e2c7be22515fbcc0f2baf467e27f5f

#CTC

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. Join JPMC's FAST team to solve complex cybersecurity issues with innovative solutions and collaborative partnerships.