Cyber Intelligence Vice President

Harness your expertise to shape robust cybersecurity strategies and safeguard critical assets. Your leadership will be pivotal in enhancing our resilience against evolving global cyber threats.

As the Cybersecurity Intelligence Vice President at JPMorgan Chase within the Cybersecurity and Tech Controls team, you will play a critical role in safeguarding the firm's digital assets and infrastructure from cyber threats. You will be responsible for identifying, assessing, and mitigating risks, as well as informing and influencing control measures across the organization. Your expertise in analyzing complex issues and developing innovative solutions, along with your ability to collaborate with diverse teams, will be crucial in enhancing the firm's security posture.

Job responsibilities

• Implement proactive threat intelligence strategies using advanced analytics and emerging technologies to identify and mitigate risks.
• Develop custom threat-hunting queries and rules for specific threat indicators in large data sets using data analysis tools or specialized languages.
• Hunting and tracking organized groups of threat actors using open and closed source tools.
• Enhance threat detection and response capabilities, staying current with cybersecurity trends, sharing insights, and implementing best practices.
• Clearly and accurately conveying analytic findings through finished reports, executive communications, and verbal briefings to an array of customers.
• Providing detailed analysis of cyber events and their relevance to JPMC or the wider financial sector.
• Build and maintain strong relationships with stakeholders, sharing threat intelligence and best practices to achieve operational goals and improve cybersecurity operations

Required qualifications, capabilities, and skills

• Formal training or certification on security concepts and 5+ years of applied experience.
• Good experience in cybersecurity, focusing on threat intelligence, analysis, and mitigation.
• Excellent communication skills, with the ability to articulate complex threat information to technical and non-technical audiences, both verbally and in writing.
• Demonstrated understanding of the vulnerability landscape and how it impacts the overall cyber threat landscape.
• An understanding in current affairs and international relations, evidenced by an understanding of geopolitical dynamics as they relate to state-sponsored intelligence operations.
• An understanding of the intelligence cycle, analysis methodologies, and processes.
• An understanding of computer networking concepts, the OSI model and underlying network protocols (e.g., TCP/IP), network traffic analysis, packet and protocol analysis (packet capture and netflow analytics). 
• An understanding of the MITRE ATT&CK Framework, stages of an attack and sub-techniques. Primarily sub-techniques associated with initial access, network communications, or deployment of malware. 
• General knowledge of global cyber threats, threat actors and the tactics, techniques, and procedures used by cyber adversaries.
• Expertise in advanced threat hunting, security research, and Open-Source Intelligence (OSINT) for risk identification and assessment.

Preferred qualifications, capabilities, and skills

• Intelligence community experience, or comparable private sector experience.
• Financial sector experience. 
• Industry certifications related to Pen Testing, Forensics, Networking or Security 
• Proficiency in scripting languages (Python, Bash, JavaScript, PowerShell) and experience with Security Information and Event Management (SIEM) tools (Splunk, Elasticsearch) for automating threat detection and response

#CTC