Vulnerability/Security Engineer (26-00710) -

Vulnerability / Security Engineer

What you'll be doing

• Triage newly disclosed vulnerabilities and determine relevance/impact to JPMorganChase applications and assets.
• Assess exploitability using threat Client, exploit/PoC details, and likely attack paths; document exposure clearly.
• Assign firm-aligned severity/risk ratings mapped to industry standards (CVE/CPE/CVSS) with clear rationale.
• Keep high-quality, audit-ready case notes; supporting follow-the-sun BAU and urgent escalations.

Skills

• Strong, hands-on vulnerability triage and risk assessment experience (end-to-end VM workflow; CVE/CPE/CVSS fluency).
• Ability to interpret vulnerability disclosures, advisories, and exploit information to judge real-world risk.
• Clear technical writing and communication for documenting impact, actions, and priorities.
• Broad familiarity with enterprise platforms (e.g., Microsoft, VMware, Oracle/Java, Citrix, F5) and patch/release lifecycle considerations.
• Comfort with cloud environments and large-scale open-source usage in enterprise estates.
• Strong prioritization, multitasking, and operations mindset.