Vice President - Threat Detection Engineer - JPMorganChase : Job Details

Vice President - Threat Detection Engineer

Join to apply for the Vice President - Threat Detection Engineer role at JPMorganChase.

Job Description

Embrace the challenge of maintaining robust digital security, driving operational excellence, and implementing cutting-edge solutions in cybersecurity.

As a Vice President - Threat Detection Engineer, you will contribute deep expertise in adversary behavior, strong security engineering and data analysis skills, and the ability to convert threat intelligence into effective detection. You will collaborate with cross-functional teams to develop a coordinated security approach, ensuring the integrity, confidentiality, and availability of sensitive data and systems. You will apply advanced analytical, technical, and problem-solving skills to enable operational excellence and implement innovative solutions to address complex security challenges. Staying current with industry best practices, policies, and procedures, you will help maintain a secure digital environment and drive continuous improvement.

Collaborating closely with SOC analysts, threat hunters, red team members, and security engineering teams, you will develop scalable, high-fidelity detections using logs, telemetry, and behavioral analytics from diverse data sources. The ideal candidate will have SOC experience, a passion for researching TTPs and the threat landscape, and the ability to translate this research into high-quality detections.

Responsibilities include advanced analysis, threat hunting, evaluating new security technologies, and integrating larger technology projects into the Cyber Defense team and monitoring functions. You will leverage your analytical, technical, and problem-solving skills to achieve operational excellence.

Responsibilities

• Design and influence comprehensive security strategies, policies, and procedures to enhance threat detection and protect digital assets.
• Implement and refine advanced threat detection rules in SIEM, EDR, and cloud platforms (e.g., Splunk, Sentinel, CrowdStrike, AWS/Azure/GCP).
• Utilize detection-as-code pipelines and SRE principles for building and maintaining detections with proper versioning, QA, and testing workflows.
• Conduct threat model reviews, architecture reviews, and detection gap assessments.
• Operationalize MITRE ATT&CK mappings, threat intel insights, and adversary simulations to develop detection logic.
• Monitor and analyze complex data to identify vulnerabilities and compromises, using advanced tools and techniques.
• Collaborate with teams to ensure a coordinated security approach, sharing insights and promoting best practices.
• Stay updated with industry trends, emerging threats, and regulatory requirements to improve security posture.

Qualifications and Skills

• 5+ years of experience in cybersecurity operations, threat detection, incident response, or SOC operations.
• Expertise in network security, malware analysis, threat hunting, security architecture, and SIEM tools.
• Knowledge of network and infrastructure security, including cloud and hybrid environments.

Preferred Skills

• Experience with detection-as-code tools (e.g., Git pipelines, CI/CD).
• Background in cloud security (AWS/GCP/Azure), especially log correlation in IaaS and SaaS.
• Familiarity with SOAR platforms and anomaly detection techniques.
• Experience using Large Language Models (LLMs) for security tasks.
• Integrating LLMs into detection workflows for context enrichment and automation.

About JPMorgan Chase

JPMorgan Chase, with over 200 years of history, offers innovative financial solutions worldwide. We provide competitive rewards, benefits, and a diverse, inclusive work environment.

Additional Information

Roles are full-time, mid-senior level, with a focus on cybersecurity and threat detection. We are committed to equal opportunity and diversity.

#J-18808-Ljbffr