Lead Security Engineer - Advanced Cryptography

JPMorgan Chase & Co.; Palo Alto (CA); On-site; USD 180,000 - 300,000; Full time

Job summary

JPMorgan Chase & Co. seeks an Advanced Cryptography Specialist to apply cutting-edge cryptographic techniques in a financial context.

You will research and implement protocols focusing on multiparty computation, quantum-safe cryptography and zero-knowledge proofs within the Emerging Technologies Security group. The role demands software development experience and at least five years of industry practice, collaborating with cryptographers, product teams, and security engineers to secure complex

Qualifications

• PhD or MS in Cryptography, CS, Mathematics with focus on MPC, PQC or ZKPs.
• Minimum 5 years applying advanced cryptographic techniques in finance.
• Proficiency in cryptographic protocol design, analysis and implementation.

Responsibilities

• Lead analysis and use of cryptographic protocols, focusing on MPC, PQC and ZKPs.
• Architect and implement cryptographic solutions for privacy in financial apps.
• Collaborate with product, engineering and compliance teams to deploy cryptography.
• Evaluate and enhance security of cryptographic protocols to comply with standards.

Skills

cryptographic protocol design

multiparty computation (MPC)

quantum-safe cryptography (PQC)

zero-knowledge proofs (ZKPs)

security engineering

Education

PhD in Cryptography

MS in Cryptography or related field

Tools

MP-SPDZ

FRESCO

SEAL

HElib

libsnark

Zokrates

Circom

Job description

We are seeking an Advanced Cryptography Specialist withstrongexpertiseintopics like multiparty computation (MPC), post-quantum cryptography (PQC)andzero-knowledge proofs (ZKPs). The ideal candidate will hold a PhDor MSin cryptography or a closely related field and have several years of hands-on experience applying advanced cryptographic techniques within the financial sector.Thecandidatewillhelpleverageinnovative cryptography at JPMorgan Chase. As amember ofthe Emerging Technologies Securitygroup within the Cybersecurity & Technology Controls organization, you will work alongside cryptographers and a group of passionate security engineers to solve complex security problems and support the deployment of cryptography-based solutions.

The position requiressoftware development experience and strongindustry experience(5years or more)incombiningcryptography and security best-practices to secure complex IT infrastructure, customer-facing services, and sensitive customer and enterprise data.

Key Responsibilities:

• Research & Development: Lead the analysisand useof cryptographic protocols, with a focus onmultiparty computation,quantum-safecryptographyandzero-knowledge proofs.
• Solution Implementation: Architect and implement cryptographic solutions for privacy and confidentiality in financialand non-financialapplications, including blockchain-based systems.
• Collaboration: Work closely withothercryptographers,product, engineering, and compliance teams to integrate advanced cryptographic techniques into real-world financial products and services.
• Security Assessment: Evaluate and enhance the security of existing and new cryptographic protocols, ensuring compliance with industry standards and regulatory requirements.
• Thought Leadership: Stay abreast of the latest research in cryptography andprivacy, andrepresent the organization in academic and industry forums.
• Mentorship: Guide and mentor junior cryptographers and engineers in advanced cryptographic concepts and best practices.
• Assess existing cryptographic libraries
• Evaluate existing crypto-agile approaches and tools-helpdefineand implementJPMC-centric solutions
• Assistwith performance impact assessment of post-quantum cryptographysolutions anddeployments
• Communicate ongoing work with other teams or organizations

Required Qualifications:

• Education: PhDor MSin Cryptography, Computer Science, Mathematics, or a closely related field, with a dissertation or significant research inmultiparty computation,quantum-safecryptographyorzero-knowledge proofs.
• Experience: Minimum5years of post-PhD/MSexperience applying advanced cryptographic techniques,preferablyin the financial sector (e.g., banking, payments, digital assets, or related domains).
• Proficiencyin cryptographic protocol design, analysis, and implementation.
• Experience with cryptographic libraries and tools (e.g.,MP-SPDZ, FRESCO, SEAL, HElib,libsnark,Zokrates,Circom, or similar).
• Proficiencyin cryptography applied to network security protocols(e.g., TLS,IPsecetc.).
• Industry Knowledge: Familiarity with regulatory and compliance considerations for privacy technologies in the financial sector.
• Communication: Excellent written and verbal communication skills, with the ability to explain complex concepts to technical and non-technical audiences.

About the Team

The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management,controlsand resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrateappropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe,stableand resilient.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receiveregardingsensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hirescreeningwhich includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior tocommencingemployment or assignment.

#CTC