Security Engineer [Multiple Positions Available]

JPMorgan Chase & Co.•Jersey City, NJ

2d•Onsite

About The Position

Duties: Design, implement, and maintain enterprise-level security solutions to protect sensitive data, systems, and infrastructure across global financial platform. Develop and implement security architectures, policies, and controls across cloud and on-premise environments. Conduct vulnerability assessments, penetration testing, and threat modelling to identify and remediate security risks. Manage security tools and platforms including security information and event management (SEIM), intrusion detection system (IDS), data loss prevention (DLP), and endpoint detection and response (EDR). Automation security operations and threat response workflows. Support secure software development life cycle by integrating security practices into CI/CD pipelines. Perform forensics analysis and incident response investigation to mitigate inter and external threats. Compliance with industry standards and frameworks. Collaborate with cross-functional engineering, cloud, and IT teams to implement secure infrastructure solutions on AWS. Performing architecture reviews to identify risks and ensure security architectures, policies, and controls across cloud and on-premise environments are in accordance with company standards. Conducting threat models to identify risks in the application during design stage. Performing forensics analysis and incident response investigation to mitigate inter and external threats.

Requirements

Master's degree in Cyber Security, Computer Engineering, Computer Science or related field of study plus 1 year of experience in the job offered or as Security Engineer, or related occupation.
The employer will alternatively accept a Bachelor's degree in Cyber Security, Computer Engineering, Computer Science or related field of study plus 3 years of experience in the job offered or as Security Engineer, or related occupation.
Utilizing Burp Proxy to Conduct vulnerability assessments, penetration testing to identify security risks
Performing automation of security operations and threat response workflows using Python, Bash and PowerShell scripting to identify and mitigate active attacks on applications
Supporting a secure software development life cycle by integrating security practices into CI/CD pipelines to reduce software risks and track vulnerabilities
Collaborating with cross-functional engineering, cloud, and IT teams to implement secure infrastructure solutions on AWS

Responsibilities

Design, implement, and maintain enterprise-level security solutions
Develop and implement security architectures, policies, and controls across cloud and on-premise environments
Conduct vulnerability assessments, penetration testing, and threat modelling
Manage security tools and platforms including security information and event management (SEIM), intrusion detection system (IDS), data loss prevention (DLP), and endpoint detection and response (EDR)
Automation security operations and threat response workflows
Support secure software development life cycle by integrating security practices into CI/CD pipelines
Perform forensics analysis and incident response investigation
Compliance with industry standards and frameworks
Collaborate with cross-functional engineering, cloud, and IT teams
Performing architecture reviews to identify risks
Conducting threat models to identify risks in the application during design stage