Penetration Tester - Cybersecurity at JP Morgan Chase (Columbus, OH)

Working in Cybersecurity takes pure passion for technology, speed, a constant desire to learn, and above all, vigilance in keeping every last asset safe and sound. Youll be on the front lines of innovation, working with a highly-motivated team laser-focused on analyzing, designing, developing and delivering solutions built to stop adversaries and strengthen our operations. Your research and work will ensure stability, capacity and resiliency of our products and emerging industry trends. Working in tandem with your internal team, as well as technologists and innovators across our global network, your ability to identify threats, provide intelligent analysis and positive actions will stop adversaries and strengthen our data.

 

This position is anticipated to require the use of one or more High Security Access (HSA) systems.  Users of these systems are subject to enhanced screening which includes both criminal and credit background checks, and/or other enhanced screening at the time of accepting the position and on an annual basis thereafter.  The enhanced screening will need to be successfully completed prior to commencing employment or assignment.

  

This role requires a wide variety of strengths and capabilities, including:

BS/BA degree or equivalent experience
Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineeringthreats and vulnerabilities, including incident response methodologies
Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity
Noted cybersecurity expert, keeping technical skills current and participating in multiple forums
Expertise in Agile and can work with at least one of the common frameworks
Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation

Experience with Agile and can work with at least one of the common frameworks is highly desired.

Ability to analyze vulnerabilities, threats, designs, procedures and architectural design, producing reports and sharing intelligence

• Experience with penetration testing against a wide variety of applications including web, mobile, and thick client above and beyond running automated tools required
• 
  
• Experience with penetration testing against internal and external facing corporate infrastructures
• 
  
• Understanding of Security architecture both from a penetration testing and design point of view
• 
  
• Experience working with application developers to validate, assess, understand root cause and mitigate vulnerabilities
• 
  
• Experience documenting technical issues identified during security assessments and recommending improvements in the existing service support tools and standard findings
• 
  
• 
  Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering  threats and vulnerabilities, including incident response methodologies
• 
  
• 
  Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity
• 
  
• 
  Noted cybersecurity expert, keeping technical skills current and participating in multiple forums
• 
  
• 
  Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation
• 
  
  Technical Skills:
  
  
• Architecture design and assessment (manual approach to penetration testing)
• 
  
• Security concepts for both Windows and Unix related operating Systems
• 
  
• Application and infrastructure vulnerabilities     
• 
  
• Exploit research and mitigation
• 
  
• Assessment tools, such as scanners, administrative utilities, local proxies, debuggers, fuzzers, etc.
• 
  
• Web technologies, solutions and attack vectors that apply to application technologies    
• 
  
• Threat modeling methodologies
• 
  
• Security source code review or development experience in C/C++, C#, VB.NET, ASP, or Java
• 
  
• Application reverse engineering techniques and procedures
• 
  
• IDS and AV evasion techniques
• 
  
  Your expertise in cyber, combined with your desire to provide innovative security services, will be an asset to our Cybersecurity team. Help deliver high-quality security solutions across all our lines of business around the world by creating, designing, implementing, and maintaining next-level technology. The work youll do is vital, as it will protect over $18 trillion of assets under custody and $393 billion in deposits every day.
  
  When you work at JPMorgan Chase & Co., youre not just working at a global financial institution. Youre an integral part of one of the worlds biggest tech companies. In 14 technology hubs worldwide, our team of 40,000+ technologists design, build and deploy everything from enterprise technology initiatives to big data and mobile solutions, as well as innovations in electronic payments, cybersecurity, machine learning, and cloud development. Our $9.5B+ annual investment in technology enables us to hire people to create innovative solutions that will not only transform the financial services industry, but also change the world.
  
  At JPMorgan Chase & Co. we value the unique skills of every employee, and were building a technology organization that thrives on diversity. We encourage professional growth and career development, and offer competitive benefits and compensation. If youre looking to build your career as part of a global technology team tackling big challenges that impact the lives of people and companies all around the world, we want to meet you.
  by via developer jobs - Stack Overflow