Cybersecurity Operations [Multiple Positions Available]

JPMorgan Chase & Co.•Jersey City, NJ

8d•$175,843 - $260,000•Onsite

About The Position

This role involves leading the cloud security workstream firm-wide, encompassing strategic planning, resource allocation, and defining assessment priorities for cloud-based applications and platforms. The position requires defining and implementing assessment methodologies, frameworks, and quality standards for penetration testing. Key responsibilities include reviewing and approving penetration testing deliverables, presenting security research and threat intelligence to senior leadership, and directing manual security assessments and penetration tests on critical applications, cloud environments, and infrastructure. The role also focuses on driving automation to enhance penetration testing efficiency, collaborating with cross-functional teams on findings and remediation, and mentoring junior team members.

Requirements

Bachelor's degree in Computer Engineering, Information Technology or related field of study
5 years of experience in the job offered or as Cybersecurity Operations, Assessments & Exercises Associate, Software Engineer, or related occupation.
Experience leading cloud security initiatives and penetration testing engagements for cloud platforms including AWS, Azure, and GCP.
Experience performing penetration testing using manual and automated testing of web, API, cloud, infrastructure, thick-client, and mobile applications to identify vulnerabilities.
Experience developing and implementing security assessment methodologies using OWASP, NIST, and PTES frameworks.
Experience overseeing quality assurance of penetration testing products and deliverables.
Experience developing automation tools and scripts using Python and Bash to enhance penetration testing efficiency.
Experience identifying and articulating systemic security issues related to threats, vulnerabilities, and risks.
Experience providing actionable remediation recommendations.
Experience presenting technical findings and writing technical reports for stakeholders.

Responsibilities

Lead the cloud security workstream firm-wide, including strategic planning, resource allocation, eligibility decisions, and establish assessment priorities for cloud-based applications and platforms.
Define and implement assessment methodologies, frameworks, and quality standards to govern penetration testing practices across the team.
Review and approve penetration testing deliverables prepared by team members to ensure technical accuracy, consistency, and alignment with firm standards.
Present security research, threat intelligence, and vulnerability trends to senior leadership and cross-functional stakeholders to inform enterprise risk decisions.
Direct manual security assessments and penetration tests targeting critical applications, cloud environments, and infrastructure to identify and mitigate cybersecurity threats.
Drive the adoption of automation to improve the efficiency and scalability of penetration testing activities.
Collaborate with cross-functional teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive and cloud security.
Prepare and present reports on findings and vulnerabilities to technical and non-technical leadership to support informed decision-making.
Mentor and develop junior team members through structured coaching, performance feedback, and technical training to build team capabilities in offensive security.