Sr. Web Application Security Engineer Lead

Job Description

JP Morgan Chase is undertaking an aggressive digital transformation agenda within the Consumer and Community Bank (CCB) which serves over 50 million customers, and builds on the success of the our market leading mobile and online service offerings. JPMC is investing in innovative ways to deepen customer engagement and create the most compelling digital experience in the financial services industry. We are looking for talent that will help us position JPMC as the undisputed leader in digital financial services and payments, enabling JPMC to deliver highly personalized, real time experiences that wow our customers.As a Sr. Web Application Security Engineer Lead, you will be a senior technical resource on an infrastructure team that implements, manages and supports network technology solutions to mitigate automated web security threats and control other forms of non-malicious automated traffic. Your subject matter expertise on network security, web application defense and cyber will help your team defend the firm from a daily onslaught of attacks against our web and mobile channels. You ll be instrumental in solving more difficult technical issues, working with business partners, Cybersecurity and technology vendors to secure one of the largest eCommerce and online banking platforms on the planet. You ll see your ideas come to life as part of a small, success-driven team. Your quest to embracing leading-edge technologies and methodologies inspires your team to follow suit. And best of all, you ll be able to harness massive amounts of brainpower through our global network of technologists from around the world to tackle big challenges.Qualifications:This role requires a wide variety of strengths and capabilities, including:

• Subject matter expertise on Web/HTTP security risks; knowledge of OWASP Automated Threat category and familiarity with OWASP Top Ten
• Solid under the hood understanding of HTTP protocols, response codes, modern usage (including API concepts), and web scripting/automation tools
• Significant experience with large-scale/high-volume eCommerce infrastructure and/or consumer mobile applications and associated threats
• Ability to identify, analyze, and report on cyber security threats within web and mobile channels
• Strong foundational grasp of modern TCP/IP network infrastructure design
• Solid working knowledge of IT Security; hands-on Cyber engineering experience highly desired (government, military or private industry)
• Industry recognized security certifications, such as CISSP, SANS Web Defender, GPPA/GCED/GWEB, etc. preferred
• Basic understanding of the companys business practices and familiarity with the companys products and services; Financial services experience a plus
• Strong deductive reasoning, critical thinking, and problem solving skills and strong verbal/written communication skills
• Team lead or other people management experience a plus
• BS/BA Degree or equivalent experience

Our Consumer & Community Banking Group depends on innovators like you to serve nearly 66 million consumers and over 4 million small businesses, municipalities and non-profits. You ll support the delivery of award winning tools and services that cover everything from personal and small business banking as well as lending, mortgages, credit cards, payments, auto finance and investment advice. This group is also focused on developing and delivering cutting edged mobile applications, digital experiences and next generation banking technology solutions to better serve our clients and customers. Qualifications: This role requires a wide variety of strengths and capabilities, including:

• Subject matter expertise on Web/HTTP security risks; knowledge of OWASP Automated Threat category and familiarity with OWASP Top Ten
• Solid under the hood understanding of HTTP protocols, response codes, modern usage (including API concepts), and web scripting/automation tools
• Significant experience with large-scale/high-volume eCommerce infrastructure and/or consumer mobile applications and associated threats
• Ability to identify, analyze, and report on cyber security threats within web and mobile channels
• Strong foundational grasp of modern TCP/IP network infrastructure design
• Solid working knowledge of IT Security; hands-on Cyber engineering experience highly desired (government, military or private industry)
• Industry recognized security certifications, such as CISSP, SANS Web Defender, GPPA/GCED/GWEB, etc. preferred
• Basic understanding of the companys business practices and familiarity with the companys products and services; Financial services experience a plus
• Strong deductive reasoning, critical thinking, and problem solving skills and strong verbal/written communication skills
• Team lead or other people management experience a plus
• BS/BA Degree or equivalent experience

,

Keyskills :
networking ebapplicationsecurity penetrationtesting cybersecurity autofinance problemsolving webapplication onlinebanking subjectmatterexpertise smallbusiness customerrelations