Cybersecurity Operations [Multiple Positions Available]

Lead the cloud security workstream firm-wide, including strategic planning, resource allocation, eligibility decisions, and establish assessment priorities for cloud-based applications and platforms. Define and implement assessment methodologies, frameworks, and quality standards to govern penetration testing practices across the team. Review and approve penetration testing deliverables prepared by team members to ensure technical accuracy, consistency, and alignment with firm standards. Present security research, threat intelligence, and vulnerability trends to senior leadership and cross-functional stakeholders to inform enterprise risk decisions. Direct manual security assessments and penetration tests targeting critical applications, cloud environments, and infrastructure to identify and mitigate cybersecurity threats. Drive the adoption of automation to improve the efficiency and scalability of penetration testing activities. Collaborate with cross-functional teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive and cloud security. Prepare and present reports on findings and vulnerabilities to technical and non-technical leadership to support informed decision-making. Mentor and develop junior team members through structured coaching, performance feedback, and technical training to build team capabilities in offensive security.

Minimum education and experience required: Bachelor's degree in Computer Engineering, Information Technology or related field of study plus 5 years of experience in the job offered or as Cybersecurity Operations, Assessments & Exercises Associate, Software Engineer, or related occupation.

Required: This position requires experience with the following: Leading cloud security initiatives and penetration testing engagements for cloud platforms including AWS, Azure, and GCP; Performing penetration testing using manual and automated testing of web, API, cloud, infrastructure, thick-client, and mobile applications to identify vulnerabilities; Developing and implementing security assessment methodologies using OWASP, NIST, and PTES frameworks; Overseeing quality assurance of penetration testing products and deliverables; Developing automation tools and scripts using Python and Bash to enhance penetration testing efficiency; Identifying and articulating systemic security issues related to threats, vulnerabilities, and risks; Providing actionable remediation recommendations; Presenting technical findings and writing technical reports for stakeholders. Job Location: 575 Washington Blvd, Jersey City, NJ 07310. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, discretionary incentive compensation which may be awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. In addition, please visit: https://careers.jpmorgan.com/us/en/about-us. Full-Time. Salary: $165,672 - $260,000 per year.