Red Team Lead: Social Engineering & Process Security

JPMorgan Chase & Co.; Wilmington (DE); On-site; USD 180,000 - 260,000; Full time

Job summary

JPMorgan Chase & Co. seeks an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls line to elevate the firm’s protection through risk-based testing, social engineering, and red team engagements against critical assets.

Design and run tests and simulations, advise cross-functional teams on risk management, and advance incident response, detection, and preventive controls. Strong leadership and deep cybersecurity experience are required to translate complex findings

Qualifications

• 5+ years of experience in cybersecurity or resiliency, with demonstrated organizational skills to plan, design, and coordinate offensive security testing, assessments, or simulation exercises.
• Knowledge of US financial services sector cybersecurity or resiliency practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies.
• Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, and provide actionable remediation, with proficiency in OWASP Top Ten and NIST CSF, offensive testing tools, or resiliency testing equivalents.
• Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across functions and levels.

Responsibilities

• Perform and manage hands-on offensive security activities leveraging social engineering as part of Red Team engagements against critical JPMC assets.
• Conduct business process assessments to include tabletop/workshops, live testing of controls by technical and social engineering attacks, and deliverables for senior stakeholders.
• Design and execute testing and simulations – including penetration tests, technical controls assessments, cyber exercises, or resiliency simulations, and refine methodologies and tools.
• Evaluate controls for effectiveness and impact on operational risk, and identify opportunities to automate control evaluation.
• Collaborate with cross-functional teams to develop assessment reports with findings, risk assessments, and remediation recommendations.
• Utilize threat intelligence to stay informed about threats, vulnerabilities, and regulations and apply knowledge to enhance assessment strategy.

Skills

Red Team operations

Social engineering

Offensive security testing

Threat intelligence

Security assessments

Communication & reporting

Networking fundamentals

OS and platform familiarity

Cross-functional collaboration

Regulatory awareness

Tools

Cobalt Strike

Metasploit

Nmap

Nessus

Burp Suite

Scripting (Python/PowerShell)

Job description

JPMorgan Chase & Co. seeks an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls line to elevate the firm’s protection through risk-based testing, social engineering, and red team engagements against critical assets.

Design and run tests and simulations, advise cross-functional teams on risk management, and advance incident response, detection, and preventive controls. Strong leadership and deep cybersecurity experience are required to translate complex findings