Are you passionate about addressing cyber issues and driving innovative solutions? Do you excel in both technical and non-technical analysis, root cause evaluation, stakeholder engagement, and novel approaches to problem-solving? If this sounds like you, apply to join the Findings Analysis and Solutions Team (FAST) within JPMC’s Cybersecurity & Technology Controls (CTC) organization to tackle these challenges on a massive scale. In this role, you will investigate security issues uncovered by our Red Team and other Assessments and Operations teams to understand the core problems and help solve them at both a tactical and operational level. The ideal candidate will be self-motivated, possess extensive technical curiosity, have a drive to understand complex cybersecurity issues, and be able to collaborate with both technical and non-technical peers.
Key Responsibilities:
- Assess the potential impact of vulnerabilities on business and technology operations using data-driven risk prioritization.
- Conduct root cause analysis (RCA) of security issues identified during assessments across various technologies and transform your findings into actionable insights.
- Collaborate with stakeholders throughout the firm to understand, address findings, and achieve the common goal of improving the security posture of the firm.
- Identify, design, and implement technical, procedural, educational, or other solutions to effectively mitigate security issues.
- Present analysis, insights, and conclusions to both technical and non-technical audiences, including senior leaders, ensuring clarity and understanding.
- Prioritize remediation efforts using multiple criteria to ensure the most worthwhile issues are addressed first.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of test evidence and draft executive-ready assessment reporting, validating outputs and handling data according to sensitivity and security requirements.
- Drives reuse-first adoption of AI-assisted workflows for control evaluation and reporting automation, ensuring results are validated and aligned to security, resiliency, and compliance expectations.
Required qualifications, capabilities, and skills :
- Formal training or certificate with 5+ years of Cybersecurity experience .
- Experience developing tactical, operational, and strategic tools and capabilities. An insatiable technical curiosity about all things Cyber and a desire to expand your skillset.
- Demonstrated ability to be proactive and resourceful, identifying and using appropriate sources for data-driven investigations.
- Knowledge of or experience in offensive or defensive cybersecurity roles and processes such as Incident Response, Threat Intelligence, Penetration Testing, Red Teaming, Risk Management, Cyber Engineering, Cyber Architecture, and Data Privacy. Familiarity with network architecture concepts, including cloud architectures, and deploying large-scale applications in an enterprise environment.
- Experience in building analytical processes, templates, and documentation. Strong written and verbal communication skills; ability to understand complex problems and present them simply.
- Ability to collaborate with high-performing teams, senior leaders, business stakeholders, third-party vendors, and technical individuals throughout the firm to effectively articulate risk and drive change. A strong commitment to ethical practices and doing what is right.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support assessment workflows (e.g., analysis support and report drafting) with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted findings and remediation recommendations before use, escalating when uncertain and following security and data handling requirements.
Preferred qualifications, capabilities, and skills :
- Coding (scripting) experience (e.g., Python, C, JavaScript, VBScript).
- Experience with enterprise level security technologies like firewalls, IDS/IPS, web proxies, DLP, SIEM, SOAR, and others.
- ==wM1AiOyVGdpVncjVmcgUGa0BCbsVGV
- ==wMzQzM0MDMyE2MycTN2QzN5YTN3IzNzYTN2IzNwITN2gjN0cDMyMmNjZTN2QTN
- Q0FMR19SQzQgIktlZXAgZ29pbmcuLi4i
- 802468e99cea9ff353e2c7be22515fbcc0f2baf467e27f5f
#CTC
About Us
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Skills Required
- Formal training or certificate with 5+ years of cybersecurity experience
- Experience developing tactical, operational, and strategic tools and capabilities
- Proactive, resourceful, data-driven investigative skills and root cause analysis experience
- Knowledge or experience in offensive or defensive cybersecurity roles/processes (Incident Response, Threat Intelligence, Penetration Testing, Red Teaming, Risk Management, Cyber Engineering, Cyber Architecture, Data Privacy)
- Familiarity with network and cloud architecture concepts and deploying large-scale enterprise applications
- Experience building analytical processes, templates, documentation, and strong written/verbal communication skills
- Demonstrated experience using enterprise-authorized AI capabilities to support assessment workflows with strong validation and data sensitivity awareness
- Ability to review and validate AI-assisted findings and remediation recommendations before use, and escalate when uncertain
- Coding/scripting experience (examples: Python, C, JavaScript, VBScript)
- Experience with enterprise security technologies (firewalls, IDS/IPS, web proxies, DLP, SIEM, SOAR)
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Medical, dental, vision, and mental-health coverage are broad, with wellness incentives, on-site or virtual care, and an EAP offering coaching and counseling. Plan materials emphasize accessible options, including multiple medical choices and tools to manage costs.
-
Parental & Family Support — Paid parental leave extends up to 16 weeks for all parents, supplemented by paid Critical Caregiver Leave. Family resources include backup childcare via Bright Horizons, lactation support and milk-shipping, family-building assistance, and even a free five-month SNOO rental for newborns.
-
Retirement Support — Retirement programs include a 401(k) with an annual company match and automatic pay credits for most employees, with a legacy pension available to earlier hires. An Employee Stock Purchase Plan at a 5% discount further supports long-term savings.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery
