JPMorgan Security Engineer III- Threat Detection / Response 

United States, New Jersey, Jersey City 

790959888

Job responsibilities

• Executes security solutions design, development, and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security requirements for internal clients (e.g., product, platform, application owners)
• Creates secure and high-quality production code and maintains algorithms that run synchronously with appropriate systems
• Applies specialized tools (e.g., vulnerability scanner) to analyze and correlate incident data to identify, interpret, and summarize the probability and impact of threats when determining specific vulnerabilities
• Leads delivery of continuity-related awareness, training, educational activities, and exercises
• Adds to team culture of diversity, equity, inclusion, and respect

Required qualifications, capabilities, and skills

• Formal training or certification in security engineering concepts and 3+ years of applied experience
• Demonstrated experience with at least one of the following four areas: 1.) Email Product Security, including experience with one or more of the following: Symantec Cloud, Proofpoint Protect, Proofpoint TAP, Proofpoint TRAP, M365 Email Product Security, Abnormal Security, Cofense Security, Sublime or Material Security; 2.) M365 Platform Security including experience with Defender for Cloud or Microsoft Sentinel (Building detections/managing content); 3.) SIEM Product Security including experience with one or more of the following: Splunk – Experience writing detections, analyzing log data, building content (dashboards, macros), Splunk Enterprise Security (SplunkES), or Microsoft Sentinel – Log management; or 4.) Endpoint Security: including experience with one or more of the following: CrowdStrike, Windows Defender for Endpoint, or Endpoint Detection Response (EDR) tooling in general
• Experience developing security engineering solutions
• Proficient in coding in one of more languages
• Overall knowledge of the Software Development Life Cycle
• Solid understanding of agile methodologies such as CI/CD, application resiliency, and security

Preferred qualifications, capabilities, and skills

• Splunk SPL
• SQL detection language building or Sigma detection – if no Splunk SPL experience
• Python (in the context of building SOAR functions for SOC operations)
• Public Cloud