Lead Security Engineer - Advanced Cryptography

We are seeking an Advanced Cryptography Specialist withstrongexpertiseintopics like multiparty computation (MPC), post-quantum cryptography (PQC) andzero-knowledge proofs (ZKPs). The ideal candidate will hold a PhDor MSin cryptography or a closely related field and have several years of hands-on experience applying advanced cryptographic techniques within the financial sector.

Thecandidatewillhelpleverageinnovative cryptography at JPMorgan Chase. As amember of
the Emerging Technologies Security
group within the Cybersecurity & Technology Controls organization, you will work alongside cryptographers and a group of passionate security engineers to solve complex security problems and support the deployment of cryptography-based solutions.

The position requires software development experience and strong industry experience(5years or more) incombiningcryptography and security best-practices to secure complex IT infrastructure, customer-facing services, and sensitive customer and enterprise data.

• Research & Development:
  Lead the analysis and useof cryptographic protocols, with a focus on multiparty computation,quantum-safecryptographyandzero-knowledge proofs.
• Solution Implementation:
  Architect and implement cryptographic solutions for privacy and confidentiality in financial and non-financial applications, including blockchain-based systems.
• Collaboration:
  
  Work closely withothercryptographers,product, engineering, and compliance teams to integrate advanced cryptographic techniques into real-world financial products and services.
• Security Assessment:
  Evaluate and enhance the security of existing and new cryptographic protocols, ensuring compliance with industry standards and regulatory requirements.
• Thought Leadership:
  Stay abreast of the latest research in cryptography and privacy, and represent the organization in academic and industry forums.
• Mentorship:
  Guide and mentor junior cryptographers and engineers in advanced cryptographic concepts and best practices.
• Assess existing cryptographic libraries
• Evaluate existing crypto-agile approaches and tools-helpdefineand implementJPMC-centric solutions
• Assist with performance impact assessment of post-quantum cryptography solutions and deployments
• Communicate ongoing work with other teams or organizations

• Education:
  
  PhDor MSin Cryptography, Computer Science, Mathematics, or a closely related field, with a dissertation or significant research in multiparty computation,quantum-safecryptographyorzero-knowledge proofs.
• Experience:
  
  Minimum5years of post-PhD/MS experience applying advanced cryptographic techniques,preferably in the financial sector (e.g., banking, payments, digital assets, or related domains).
• Proficiency in cryptographic protocol design, analysis, and implementation.
• Experience with cryptographic libraries and tools (e.g.,MP-SPDZ, FRESCO, SEAL, HElib,libsnark,Zokrates,Circom, or similar).
• Proficiency in cryptography applied to network security protocols(e.g., TLS,IPsecetc.).
• Industry Knowledge:
  Familiarity with regulatory and compliance considerations for privacy technologies in the financial sector.
• Communication:
  Excellent written and verbal communication skills, with the ability to explain complex concepts to technical and non-technical audiences.

The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management,controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe,stableand resilient.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of
1) sensitive cybersecurity and technology functions they perform within systems or
2) information they receiveregardingsensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hirescreeningwhich includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior tocommencingemployment or assignment.