Firewall / CSIRT Lead, Global Network Operations

Job description

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $2.6 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small business, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world"s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com.

Global Technology Infrastructure (GTI) is the technology infrastructure organization for the firm, delivering a wide range of products and services, and partnering with all lines of business to provide high quality service delivery, exceptional project execution and financially disciplined approaches and processes in the most cost effective manner. The objective of GTI is to balance both business alignment and the centralized delivery of core products and services. GTI is designed to address the unique infrastructure needs of specific lines of business and the demand to leverage economies of scale across the firm. The Global Network Services (GNS) organization, together with Infrastructure Platform Deployment (IPD), works to deliver seamless end-to-end Data Center services for the firm-including provisioning of all backend infrastructures.

GNS focuses on improving the quality of service to our clients by reducing hand-offs and driving consistency, standardization and efficiency. GNS consolidates all logical and physical activities performed across IPD, and most of Global Network Services (GNS) and Infrastructure as a Service (IaaS), in the end-to-end delivery of services. GNS also delivers value-added advanced IP Services products and services to meet business demands.

In this role, you will be a part of a global network security operations response team, to focus on proactively securing the infrastructure from common vulnerabilities and protecting them from attack, as well as responding to and mitigating DDoS or other malicious activity in real-time.

You will be responsible for:
· Identifying application vulnerabilities and security needs
· Developing, maintaining and debugging FW rules and policies to detect and stop attacks and protect against vulnerabilities
· Deploying and managing IP reputational blocking services
· Responding to network attacks against web applications
· Identifying and executing proactive changes to eliminate potential breaches, address security gaps and mitigate impact of future attacks
· Maintaining documentation for perimeter security controls
· Maintaining playbooks for responding to and mitigating attacks
· Creating change requests for configuration changes on load balancers, proxies, routers, switches and firewalls etc.
· Documenting complete project plan and change requests

Desired profile

· Bachelor"s degree/Diploma in Engineering, Computer Science or equivalent experience
· 3-5+ years of experience in Information Technology with an emphasis on Networking, Security, and TCP Communications
· Substantial experience in Routing & Switching / IT security
· Significant hands-on experience with network Firewall and IPS technology
· Experience mitigating network attacks (such as DDoS) strongly preferred
· Hands-on Checkpoint MDS/Provider-1 experience is strongly preferred
· Checkpoint Certification (CCSA) preferred
· Checkpoint Expert/Master Certification (CCSE/CCSM) strongly preferred
· Proficiency in Python, PERL, Shell Scripting or other scripting/programming languages
Proven customer facing experience and technical project management
· Knowledge of Enterprise Change Management Process and Tools
· Possess excellent communication skills be able to operate at all levels