Cybersecurity Operations [Multiple Positions Available]

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 176,000 - 260,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a senior security professional to lead the cloud security workstream across the firm. You will shape assessment priorities, govern penetration testing practices, and present threat intelligence to executives.

The role entails directing manual and automated testing of cloud environments, defining methodologies, and ensuring deliverables meet firm standards while mentoring junior staff.

Qualifications

• Bachelor's degree in Computer Engineering, Information Technology or related field with 5 years of security experience.
• Experience leading cloud security and penetration testing across AWS, Azure, and GCP.
• Proven ability to present findings to senior leadership and stakeholders.

Responsibilities

• Lead cloud security workstream firm-wide including strategic planning and resource allocation.
• Define assessment methodologies and quality standards for penetration testing.
• Review deliverables for technical accuracy and standards alignment.
• Present research, threat intel, and vulnerabilities to senior leadership.
• Direct manual and automated tests targeting cloud environments and critical apps.
• Mentor junior staff and develop team capabilities in offensive security.

Skills

Cloud security leadership

Penetration testing

AWS

Azure

GCP

Manual & automated testing

Python scripting

Bash scripting

Threat intelligence

Communication to leadership

Education

Bachelor's degree in Computer Engineering, Information Technology or related field

Tools

Python

Bash

OWASP

NIST

PTES

Job description

DESCRIPTION:

Duties: Lead the cloud security workstream firm-wide, including strategic planning, resource allocation, eligibility decisions, and establish assessment priorities for cloud-based applications and platforms. Define and implement assessment methodologies, frameworks, and quality standards to govern penetration testing practices across the team. Review and approve penetration testing deliverables prepared by team members to ensure technical accuracy, consistency, and alignment with firm standards. Present security research, threat intelligence, and vulnerability trends to senior leadership and cross-functional stakeholders to inform enterprise risk decisions. Direct manual security assessments and penetration tests targeting critical applications, cloud environments, and infrastructure to identify and mitigate cybersecurity threats. Drive the adoption of automation to improve the efficiency and scalability of penetration testing activities. Collaborate with cross-functional teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive and cloud security. Prepare and present reports on findings and vulnerabilities to technical and non-technical leadership to support informed decision-making. Mentor and develop junior team members through structured coaching, performance feedback, and technical training to build team capabilities in offensive security.

QUALIFICATIONS:

Minimum education and experience required: Bachelor's degree in Computer Engineering, Information Technology or related field of study plus 5 years of experience in the job offered or as Cybersecurity Operations, Assessments & Exercises Associate, Software Engineer, or related occupation.

Skills Required:

Leading cloud security initiatives and penetration testing engagements for cloud platforms including AWS, Azure, and GCP; Performing penetration testing using manual and automated testing of web, API, cloud, infrastructure, thick-client, and mobile applications to identify vulnerabilities; Developing and implementing security assessment methodologies using OWASP, NIST, and PTES frameworks; Overseeing quality assurance of penetration testing products and deliverables; Developing automation tools and scripts using Python and Bash to enhance penetration testing efficiency; Identifying and articulating systemic security issues related to threats, vulnerabilities, and risks; Providing actionable remediation recommendations; Presenting technical findings and writing technical reports for stakeholders.

Job Location:

575 Washington Blvd, Jersey City, NJ 07310.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, discretionary incentive compensation which may be awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. In addition, please visit: https://careers.jpmorgan.com/us/en/about-us.

Full-Time. Salary: $175,843 - $260,000 per year.