Security Engineer III - Vulnerability Assessment

As a key member of the global Cybersecurity & Technology Controls vulnerability scanning team, you will be responsible for delivering secure vulnerability management solutions that align with functional and user requirements. Your expertise in enterprise-level vulnerability management will be crucial in conducting thorough network vulnerability assessments to identify and address potential security threats.

Job responsibilities

• Facilitate the clarification and implementation of security requirements across multiple networks to enable multi-level security solutions that meet organizational needs.
• Collaborate on network architecture and design, focusing on integrating and optimizing vulnerability scanning tools across an enterprise environment.
• Perform deployment, administration, management, configuration, testing, documentation, and integration tasks related to Cloud Network Security Platforms, championing a DevOps security model to ensure security is automated and scalable across all platforms.
• Develop new cloud security implementations, ensuring seamless integration with existing network infrastructure.
• Design and develop strategies for end-to-end automation, including architecture design, performance monitoring, best practices, and proof of concepts
• Ensure quality control of engineering deliverables, maintaining compliance with strict security standards and firm policies.
• Analyze complex data systems to drive decision-making, ensuring all engineering activities align with firm policies and objectives.
• Collaborate with technologists, stakeholders, and senior business leaders to recommend business process modifications.

Required qualifications, capabilities, and skills

• Formal training or certification in Security Engineering concepts, with 3+ years of applied experience in the field.
• Proven expertise in planning, designing, and implementing enterprise-level vulnerability management or security solutions.
• Strong proficiency in network architecture and design, with a deep understanding of core networking concepts.
• Experience with public cloud architecture and cloud security, with hands-on experience in deploying and managing cloud-based solutions.
• Expertise in developing and designing on-prem and cloud architectures, ensuring scalability, application resiliency, and robust security implementations.
• In-depth knowledge and experience in vulnerability management and scanning, threat modeling, vulnerability discovery, or penetration testing.
• Ability to independently tackle design and functionality challenges with minimal oversight.

  Preferred qualifications, capabilities, and skills

• Certifications in AWS, Networking, or Security
• Experience with major vulnerability scanning tools (e.g. Rapid7, Tenable Nessus, or Qualys)
• Proficiency in automation tools and practices (e.g. Ansible and/or Terraform)

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. 

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and