Cyber Intelligence Vice President, Malware Reverse Engineer

Harness your expertise to shape robust cybersecurity strategies and safeguard critical assets. Your leadership will be pivotal in enhancing our resilience against evolving global cyber threats.

As a Cybersecurity Intelligence Vice President in Cybersecurity & Tech Controls, you'll perform complex static and dynamic analysis of malicious code identified through internal investigations and from external sources ranging from commodity malware to Advanced Persistent Threat (APT) nation-state malware. You will play a critical role in safeguarding the firm's digital assets and infrastructure from cyber threats. Responsible for identifying, assessing, and mitigating risks, you will inform and influence control measures across the organization. Your expertise in analyzing complex issues and developing innovative solutions, along with your ability to collaborate with diverse teams, will be crucial in enhancing the firm's security posture. As a subject matter expert, you will contribute to strategic cybersecurity initiatives and continuously improve our threat detection and response capabilities. Your work significantly impacts the firm's operations, fiscal management, public image, employee morale, and client relationships.

Job responsibilities

• Conducting malware analysis and reverse engineering of suspicious code
• Performing deep dive technical analysis of cyberattack tactics, techniques, and procedures (TTPs)
• Developing signatures to identify malware families, actor techniques, and other noteworthy code sequences
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat intelligence synthesis and prioritization, validating outputs and handling data according to sensitivity and security requirements.
• Automating malware analysis and intelligence gathering processes
• Hunting for novel samples, indicators of compromise (IOCs), and actor TTPs in internal and external datasets
• Collaborate with business stakeholders, technology teams, and external vendors to analyze, document, and communicate intelligence findings through comprehensive technical reports, while supporting the development and dissemination of actionable insights a
• Researching threats, vulnerabilities, and exploits to enhance monitoring and detection capabilities
• Partnering with the Incident Response (IR) teams to understand incidents and support technical analysis of malicious cyber events
• Contributing technical expertise and Cybersecurity perspectives to discussions regarding JPMC global technology infrastructure
• Drives reuse-first adoption of AI-assisted workflows to improve threat hunting and detection engineering productivity, ensuring outputs are validated and aligned to security expectations

Required qualifications, capabilities, and skills

• Bachelor's Degree in Computer Science or related field or equivalent experience
• 5+ years of cybersecurity experience specializing in threat intelligence, malware analysis, and reverse engineering, with proven leadership ability to lead, mentor, and develop high-performing analyst teams.
• Proven experience in reverse engineering malware, coupled with deep expertise in threat intelligence, incident response, digital forensics, and log analysis to drive effective threat detection, investigation, and response activities.
• Experience with debuggers, disassemblers, and other malware analysis tools (i.e. IDA Pro, Ghidra)
• Coding (scripting) experience (i.e. Python, C, JavaScript, VBScript, etc.)
• Knowledge in Operating Systems (i.e. Windows, Linux, Mac, Mobile), processor architectures (i.e. x86, x64), and computer networking
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support threat intelligence, detection engineering, and security research workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted intelligence findings and detection recommendations before implementation, escalating when uncertain and following security and data handling requirements.
• Experience in developing both tactical and strategic tools and capabilities
• Strong written and verbal communication skills; ability to understand complex problems while formally presenting them simplistically
• Ability to coordinate, work with and gain the trust of business stakeholders, technical resources, and third-party vendors.

#CTC

ABOUT US

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

ABOUT THE TEAM

The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.