Lead Security Engineer - Advanced Cryptography
JPMorgan Chase · Palo Alto, United States · 11d ago
We are seeking an Advanced Cryptography Specialist with strong expertise in topics like multiparty computation (MPC), post-quantum cryptography (PQC) and zero-knowledge proofs (ZKPs). The ideal candidate will hold a PhD or MS in cryptography or a closely related field and have several years of hands-on experience applying advanced cryptographic techniques within the financial sector. The candidate will help leverage innovative cryptography at JPMorgan Chase. As a member of the Emerging Technologies Security group within the Cybersecurity & Technology Controls organization, you will work alongside cryptographers and a group of passionate security engineers to solve complex security problems and support the deployment of cryptography-based solutions.
The position requires software development experience and strong industry experience (5 years or more) in combining cryptography and security best-practices to secure complex IT infrastructure, customer-facing services, and sensitive customer and enterprise data.
Key Responsibilities:
- Research & Development: Lead the analysis and use of cryptographic protocols, with a focus on multiparty computation, quantum-safe cryptography and zero-knowledge proofs.
- Solution Implementation: Architect and implement cryptographic solutions for privacy and confidentiality in financial and non-financial applications, including blockchain-based systems.
- Collaboration: Work closely with other cryptographers, product, engineering, and compliance teams to integrate advanced cryptographic techniques into real-world financial products and services.
- Security Assessment: Evaluate and enhance the security of existing and new cryptographic protocols, ensuring compliance with industry standards and regulatory requirements.
- Thought Leadership: Stay abreast of the latest research in cryptography and privacy, and represent the organization in academic and industry forums.
- Mentorship: Guide and mentor junior cryptographers and engineers in advanced cryptographic concepts and best practices.
- Assess existing cryptographic libraries
- Evaluate existing crypto-agile approaches and tools – help define and implement JPMC-centric solutions
- Assist with performance impact assessment of post-quantum cryptography solutions and deployments
- Communicate ongoing work with other teams or organizations
Required Qualifications:
- Education: PhD or MS in Cryptography, Computer Science, Mathematics, or a closely related field, with a dissertation or significant research in multiparty computation, quantum-safe cryptography or zero-knowledge proofs.
- Experience: Minimum 5 years of post-PhD/MS experience applying advanced cryptographic techniques, preferably in the financial sector (e.g., banking, payments, digital assets, or related domains).
- Proficiency in cryptographic protocol design, analysis, and implementation.
- Experience with cryptographic libraries and tools (e.g., MP-SPDZ, FRESCO, SEAL, HElib, libsnark, Zokrates, Circom, or similar).
- Proficiency in cryptography applied to network security protocols (e.g., TLS, IPsec etc.)
- Industry Knowledge: Familiarity with regulatory and compliance considerations for privacy technologies in the financial sector.
- Communication: Excellent written and verbal communication skills, with the ability to explain complex concepts to technical and non-technical audiences.
About the Team
The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.
High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.
#CTC