Apply on Employer Site

Chase · 5 days ago

Security Operations Vice President

600 Travis St, Houston, TX, 77002, US

Full-time

Onsite

Mid, Senior Level

$152K/yr - $260K/yr

5+ years exp

JPMorgan Chase is one of the oldest financial institutions, offering innovative financial solutions to a wide range of clients. As the Vice President in the Cybersecurity Perimeter Response Team, you will defend the Firm’s digital perimeter against sophisticated DDoS attacks and lead the deployment of web application firewall signatures across multiple platforms.

BankingFinancial Services

Responsibilities

Investigate anomalous network traffic patterns and events, collaborating with application teams, subject matter experts, and senior management

Develop, maintain, and optimize DoS and WAF policies to protect the Firm, balancing operational risk and security posture

Identify, document, and mitigate risks from emerging threats, leveraging intelligence from peer organizations

Test and validate policy rules and signatures for effectiveness and applicability

Profile new and existing applications, mapping them to appropriate perimeter security policies

Deliver incident response support for DoS, DDoS, and related application attacks

Provide regular activity and progress reporting to Cyber Operations management

Follow best practices in threat recognition, pattern analysis, and surveillance detection to establish efficient, high-quality security processes

Qualification

Cybersecurity operationsWAF administrationIncident responseNetwork performance managementTCP/IP administrationSIEM toolsApplication developmentSoft skills

Required

Formal training or certification with 5+ years of experience in cybersecurity operations, security system management, or related roles

Network performance management (e.g., troubleshooting server response and routing issues)

WAF administration (custom signature authoring, deployment governance, patching, efficacy evaluation, policy testing)

Web application development/administration (troubleshooting web servers, application stacks, containers, OS, micro-services, and API/data validation errors)

TCP/IP network administration, optimization, and troubleshooting

Incident response for inbound application attacks, with experience in a formal Security Operations Center (SOC) and proficiency in distinguishing suspicious from benign internet sources