Job DescriptionThe Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firms cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The groups number one priority is to enable the business by keeping the firm safe, stable and resilient. As an experienced professional in our Cybersecurity organization, youre equally committed to watching over our data today, as well as finding innovative new ways to protect it in the future. To do that, youll help lead a highly motivated team laser-focused on analyzing, designing, developing and delivering solutions built to stop adversaries and strengthen our operations. Youll use your leadership skills to give guidance, best practice advice and support across all our business and technology groups. Youll take the lead on incident response, risk reviews and vulnerability assessments, identifying threats, all of which ladder up to driving and selecting cost-effective solutions. Youll deploy best practices, new policies, and emerging trends to strengthen our strategic roadmap. Youll keep management, executive directors, managing directors and stakeholders in the loop, as well as managing people and budgets. As part of JPMorgan Chase & Co.s global team of technologists and innovators, your work will have a massive impact, both on us as a company, as well as our clients and our business partners around the world. The Cybersecurity Application Security Design & Modelling - Lead Product Specialist will focus on managing and enhancing the security framework for application security and assurance within JPMC. This role will interface heavily with the Global Chief technology office (CTO), Application Development leads, Application Architects and Global Technology (GTI), to provide Cyber support and ensure security technologies provided to application development communities are configured and delivered in conformance with Cybersecurity control standards. Responsibilities Include: Provide SME guidance in appropriately securing business applications owned, used, and provided by the firm Drive product strategy and roadmap through innovative ideas and solutions to resolve systemic software security issues Using agile methodology create execution strategies to focus on embedding security controls into design, development and testing practices and methodologies to enhance effectiveness Drive application security design principles and requirements processes to enhance the firms ability to streamline software delivery Assessing secure development approaches, requirements, and e valuating existing solutions and providing strategic direction towards enhancements Enhance current inventory of security features and libraries Continuously enhance the security standards based upon existing and emerging technologies and threats, translating the standards into requirements and solutions Create a global inventory of common security reusable components, defining a new program for identifying, managing, adopting and maintain them. Drive automation of cyber processes and tools that impact the software development lifecycle in collaboration with the firm development office This role requires a wide variety of strengths and capabilities, including : BS/BA degree or equivalent experience Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineeringthreats and vulnerabilities, including incident response methodologies Experience to include combination of the following experience: Software Assurance Software Security Penetration Testing Static Scan/Analysis Dynamic Scan/Analysis Threat Modeling Secure SDLC Lifecycle Security Security Design Secure CI/CD Automated Security Testing Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Expertise in Agile and can work with at least one of the common frameworks Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation 5+ years of experience in application security and secure systems development lifecycles Demonstrated experience leading Security Design Reviews and/or Architecture Risk Analysis Experience modeling patterns for applications and business processes Experience identifying emerging risks and vulnerabilities beyond the common OWASP, NIST, SANS inventories We are looking for multi-disciplined forward-looking technologists like you with diverse backgrounds and experiences including in areas such as cybersecurity, big data, machine learning risk management and controls, compliance and oversight, cloud security. We are looking for multi-disciplined forward-looking technologists like you with diverse backgrounds and experiences including in areas such as cybersecurity, big data, machine learning risk management and controls, compliance and oversight, cloud security. When you work at JPMorgan Chase & Company, you're not just working at a global financial institution. You're an integral part of one of the world's biggest tech companies. In 14 technology hubs worldwide, our team of 40,000 technologists design, build and deploy everything from enterprise technology initiatives to big data and mobile solutions, as well as innovations in electronic payments, cybersecurity, machine learning, and cloud development. Our $9.5B+ annual investment in technology enables us to hire people to create innovative solutions that will not only transform the financial services industry, but also change the world. At JPMorgan Chase & Company we value the unique skills of every employee, and we're building a technology organization that thrives on diversity. We encourage professional growth and career development, and offer competitive benefits and compensation. If you're looking to build your career as part of a global technology team tackling big challenges that impact the lives of people and companies around the world, we want to meet you.