Pentester at JPMorgan Chase Bank, N.A. in Jersey City, New Jersey

Job Description:

Responsibilities

The role is part of a global cyber security assessments team delivering next generation application and infrastructure testing. Primary focus of this role would be to perform hands on penetration testing of some of the most critical applications, platforms, and the perimeter within JPMC. Successful candidates will have excellent knowledge of security concepts, significant experience, and proven expertise in application, mobile, web & infrastructure assessments.

Requirements

• Penetration testing against a wide variety of applications including web, mobile, and thick client above and beyond running automated tools
• Experience with penetration testing against internal and external facing corporate infrastructures
• Understanding of Security architecture both from a penetration testing and design point of view
• Experience working with application developers to not only understand root cause and mitigate vulnerabilities, but also to identify where vulnerabilities can be identified earlier in the SLDC and provide recommendations for automation, and vulnerability 'avoidance'.
• Experience of enhancing developer velocity and removing friction in the development lifecycle
• •
• • Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies
• •Ablity to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation

Technical Skills:

• Application, Infrastructure, & Cloud testing methodologies
• Architecture design and assessment (manual approach to penetration testing)
• Application and infrastructure vulnerabilities
• Exploit research and mitigation
• Assessment tools, such as scanners, administrative utilities, local proxies, debuggers, fuzzers, etc.
• Web technologies, solutions and attack vectors that apply to application technologies
• Threat modeling methodologies
• Security source code review or development experience in C/C++, C#, VB.NET, ASP, or Java
• Application reverse engineering techniques and procedures
• IDS and AV evasion techniques

JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.

Equal Opportunity Employer/Disability/Veterans

Apply Now