DevOps Cloud Engineer – Cyber Security

Job description

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of trillion and operations in more than 60 countries. The firm is a leader in investment banking, financial services for consumers, small business and commercial banking, financial transaction processing, asset management, and private equity.

Cyber security is chartered with managing and directing the security programs focused on the discipline of cyber security design, implementation, analytics, threats, monitoring, response, and investigation across the organization. Our core services are focused on assuring the security of the computing environment, protecting customer and employee confidential information, and complying with regulatory requirements globally. This is accomplished through strong information risk governance, active collaboration with business risk managers, and providing high quality security solutions and services which enable improving the organization's overall risk posture.

Summary:

The Cloud Security Engineer will design, develop, test and implement JPMorgan Chase & Co security solutions for our cloud environments. The successful candidate will work within the Security Engineering team, in partnership with the firm's Architecture, Security Operations and Lines of businesses, in a hands-on environment; working with numerous and varied applications. The successful candidate will have a strong combination of practical networking, development, engineering, administration, information technology, and security skills.

Specific responsibilities will include:

· Performs deployment, administration, management, configuration, testing, and integration tasks related to the cloud security platforms
· Help develop new cloud security strategies and implementations for the firm
· Champion a devops security model so that security is automated and elastic across all platforms
· Support the Firm's goals in secure cloud adoption through hands on interaction with development teams to cultivate a cloud first mindset in transitioning workloads

Desired profile

Required Skills/Experience

·  Core security fundamentals and knowledge
·  Public/Private Cloud Experience (AWS, Azure, Google Cloud, VMware, OpenStack)
·  Understanding of core concepts for Public/Private/Hybrid clouds (networking, security groups, IAM, etc.)
·  In-Depth OS Experience (RHEL, Ubuntu, Windows Server)
·  Understanding of networking (ports/protocols), firewalls, load balancers and IPS
·  Programming Skills (Python, Perl, Ruby, Bash, Go)
·  Understanding of host based security and tooling
·  Knowledge of the latest cloud security trends and tools in the market
·  Willingness to learn new technologies in a rapidly changing environment

Preferred Experience/Skill

·  Dev tools experience (Github, Terraform, Jenkins, etc.)
·  Security tools automation experience
·  Security analytics experience
·  Understanding encryption and the principles/practices behind it
·  Experience with compliance standards and/or programs (FISMA, PCI, FedRAMP, NIST 800-53 Rev 4)
·  Experience in a security operations role (logging, monitor, incident response)