Security Engineer III- Chase (Figg)

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Security Engineer III in Cybersecurity & Tech Controls in JPMorgan & Chase,  you are an integral part of team that works to deliver software solutions, prevents misuse and malicious behavior, and implement critical technology solutions using tamper-proof methods across various business functions. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions. 

Job Responsibilities

• Responsible for activities related to continued security monitoring and is a first line of defense for incident response and vulnerability management.
• Researches, recommends, evaluates, and implements cybersecurity solutions or configurations that identify and/or protect against potential threats, and respond to security violations
• Performs configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems
• Performs development, deployment, administration, management, configuration, testing and integration tasks related to the security of the Offers and Shopping platform.
• Assists with the ongoing gathering of evidence to support compliance with PCI, SOC, internal controls and business controls.
• Work with internal technology team to ensure security and compliance is designed from-the-start for modern technology stacks such as public cloud, containers, API gateways, microservices & serverless platforms.
• Develops and maintains documentation for security systems and procedure

Required Qualifications, Capabilities, and Skills

• Formal training or certification on security engineering concepts and 3+ years applied experience
• 3+ years AWS administration with a focus on security
• Bachelor’s degree in computer information systems or equivalent work experience
• Strong knowledge of cybersecurity domains, including Asset Security, Communication & Network Security, Identity & Access Management (IAM), Security & Risk Management, Security Architecture & Engineering, Security Assessment & Testing, Security Operations, and Software Development Security
• Strong analytical and problem-solving skills to enable effective security incident and problem resolution
• Demonstrated proficiency in scripting languages (PowerShell and/or python) for automating security tasks and processes
• Experience with security tools and technologies, including Security Information & Event Management (SIEM), Endpoint Detection & Response (EDR), Data Loss Prevention (DLP), and Web Application Firewall (WAF)

Preferred Qualifications, Capabilities, and Skills

• Experience in developing, documenting, and maintaining security procedures and documentation 
• Working knowledge of information security frameworks and regulations (e.g., NIST RMF, SOC 2 Type II, or PCI)
• Excellent organizational, verbal, and written communication skills
• Maintain or working towards at least one (1) of the following industry certifications: CISSP, CISA, SANS certification or other equivalent certifications