Cloud Security Operations Lead – Penetration Testing

Next Frontier Capital; Jersey City (NJ); On-site; USD 176,000 - 260,000; Full time

Benefits offered by this job

Health care coverage

On-site health centers

Retirement savings plan

Tuition reimbursement

Job summary

JPMorgan Chase & Co. in Jersey City seeks a Senior Cloud Security Lead to drive the firm-wide cloud security workstream, shape strategy, allocate resources, and set assessment priorities for cloud apps and infrastructure.

The role directs manual and automated penetration tests across web, API, cloud, and infrastructure, enforces security assessment methodologies, and mentors staff while presenting findings to senior leadership.

Qualifications

• Bachelor's degree in Computer Engineering, IT or related field with 5+ years in cybersecurity roles.
• Experience leading cloud security and penetration testing across AWS/Azure/GCP.
• Proficient in OWASP, NIST, PTES; strong reporting and remediation guidance.

Responsibilities

• Lead firm-wide cloud security workstream including strategic planning and resource allocation.
• Review and approve penetration testing deliverables for accuracy and standards.
• Present findings to senior leadership and cross-functional teams.
• Direct manual assessments and tests on cloud environments and infrastructure.
• Drive automation to scale penetration testing.
• Mentor junior staff through coaching and training.

Skills

Cloud security leadership

Penetration testing

AWS/Azure/GCP

Manual & automated testing

Security frameworks

Automation scripting

Python Bash

Threat & risk analysis

Remediation guidance

Technical reporting

Education

Bachelor's degree in Computer Engineering, IT or related field

Tools

Python

Bash

Job description

JPMorgan Chase & Co. in Jersey City seeks a Senior Cloud Security Lead to drive the firm-wide cloud security workstream, shape strategy, allocate resources, and set assessment priorities for cloud apps and infrastructure.

The role directs manual and automated penetration tests across web, API, cloud, and infrastructure, enforces security assessment methodologies, and mentors staff while presenting findings to senior leadership.