Summary
Overview
Work History
Education
Certification
Skills And Proficiencies
Timeline
Generic

Nicholas J. Conley

Ardmore,PA

Summary

Experienced cybersecurity professional at JPMorgan Chase & Co. leading AI Red Teaming and Runtime Protection Services, successfully cutting testing time by 65%. Developed JPMC's AI Attack Library and conducted gap assessments against MITRE ATLAS and NIST. Delivered security solutions for Fortune 100 clients at KPMG. Holds a B.S. in Cybersecurity Analytics from Penn State and is AWS Certified Cloud Practitioner. Skilled in leading teams and implementing innovative security frameworks to ensure comprehensive protection for organizations.

Overview

4
4
years of professional experience
1
1
Certification

Work History

Vice President - Lead AI Cybersecurity Engineer

JPMorgan Chase & Co.
01.2025 - Current
  • Established AI Red Teaming Service, leading security assessments for high-risk, customer-facing applications, addressing risks like prompt injection, data leakage, denial of service, illegal activities, and XSS.
  • Developed automation tools, reducing red team testing time by 65%, improving efficiency across JPMC's AI systems.
  • Created a firmwide AI Red Teaming Framework, defining mandatory testing protocols, roles, tooling, and templates, with runbooks for Virtual Assistant and LLM-generated SQL query applications.
  • Partnered with use case owners to develop plans and presented findings to senior leadership to drive AI security improvements.
  • Led AI Runtime Protection Service, implementing real-time LLM content filtering with policy-based detection using non-AI and AI model-based engines.
  • Managed project timelines and teams to ensure timely delivery of cybersecurity initiatives.
  • Identified opportunities to improve business process flows and productivity.

AI Cybersecurity Architect

JPMorgan Chase & Co.
04.2023 - 01.2025
  • Conducted AI security gap assessments against MITRE ATLAS, NIST AI Risk Management Framework, OWASP Top 10 for LLMs, CISA Guidelines, and EU AI Act, identifying critical vulnerabilities.
  • Developed JPMC's AI Attack Library, enabling teams to test AI system robustness enterprise-wide.
  • Performed inference testing on AWS Bedrock and Azure OpenAI models using Garak, recommended content filtering policies, and presented reports to senior leadership to shape AI security strategy.
  • Gained strong leadership skills by managing projects from start to finish.

Advisory Associate, Cyber Security Services

KPMG LLP
07.2021 - 04.2023
    • Delivered cybersecurity solutions for Fortune 100 Banking and Fortune 25 Healthcare clients, enhancing compliance and security postures.
    • Led AWS Controls Testing Automation, validating controls, guiding developers, and automating testing with EC2, Terraform, Cloud Custodian, Python, and Jira, reducing manual effort.
    • Conducted Cyber Gap Assessments for SWIFT CSCF and FRB Fedline, gathering evidence from control owners to meet regulatory requirements.
    • Developed a Controls Dashboarding Roadmap for a healthcare client, creating ServiceNow mock-ups to improve control health visibility.

Education

Bachelor of Science - Cybersecurity Analytics and Operations

The Pennsylvania State University
University Park, PA
05.2021

Certification

AWS Certified Cloud Practitioner

Skills And Proficiencies

AI Red Teaming, LLM Content Filtering, Prompt Injection Testing, Garak (2 yrs), Cyber Risk Management, Controls Testing, Cybersecurity Assessment (4 yrs), AWS, Azure OpenAI, Terraform, Cloud Custodian, Policy-as-Code (3 yrs), Python, Java, SQL, Wireshark, FTK Imager, Ghidra, IDA, Jira, ServiceNow (2–4 yrs), MITRE ATLAS, NIST AI RMF, OWASP Top 10 for LLMs, SWIFT CSCF, FRB Fedline (1–2 yrs), Client-Facing Communication, Project Management, Enterprise Risk Management (4 yrs), G-Suite, MS Office (Word, Excel, PowerPoint), SOLIDWORKS, VMWare (2–8 yrs)

Timeline

Vice President - Lead AI Cybersecurity Engineer

JPMorgan Chase & Co.
01.2025 - Current

AI Cybersecurity Architect

JPMorgan Chase & Co.
04.2023 - 01.2025

Advisory Associate, Cyber Security Services

KPMG LLP
07.2021 - 04.2023

Bachelor of Science - Cybersecurity Analytics and Operations

The Pennsylvania State University
Nicholas J. Conley