Lead Security Engineer - Application Security

About the Role

Become a vital member of a premier security engineering team safeguarding one of the world's most complex financial institutions. At JPMorganChase, security engineers are encouraged to innovate boldly, solve challenging problems, and build impactful solutions at an unparalleled scale. Collaborate with skilled technologists and business executives dedicated to staying ahead of ever-evolving threats, while having access to extensive tools and support to advance your career significantly. This opportunity allows you to make a profound impact on the global firm's security posture.

Key Responsibilities

• Design and implement innovative, enterprise-level security solutions that surpass standard methods to address sophisticated technical and threat challenges.
• Develop robust, secure production code and conduct comprehensive code reviews to detect and mitigate vulnerabilities introduced by others.
• Continuously monitor industry trends and regulatory updates to refine security protocols and evaluate control effectiveness, minimizing organizational risk.
• Collaborate with stakeholders and senior business leaders to understand security requirements and advise on strategic adjustments during heightened vulnerability or risk phases.
• Architect and uphold tamper-resistant, audit-defensible security measures across multiple technology domains and business functions.
• Utilize cloud-native services and infrastructure-as-code strategies to craft scalable, secure, and observable solutions within AWS environments.
• Employ authorized AI-assisted development tools to expedite engineering workflows, ensuring outputs are critically validated for accuracy, security, and performance.

Required Qualifications and Skills

• Proven expertise in designing and delivering enterprise-wide security solutions across complex, multi-domain environments.
• Advanced Python programming skills with a strong emphasis on security best practices and secure coding standards.
• Comprehensive knowledge of all stages of the Software Development Life Cycle (SDLC), with a focus on integrating security throughout the process.
• Deep understanding of agile methodologies and continuous integration/delivery pipelines, including hands-on experience with tools like Jenkins, GitHub, and Spinnaker, alongside application resilience and security principles.
• Excellent communication skills for effectively conveying security risks, recommendations, and technical trade-offs to senior business leaders.
• Hands-on experience managing AWS cloud services such as Elastic Container Service (ECS), Elastic Compute Cloud (EC2), Lambda, EventBridge, S3, Identity and Access Management (IAM), CloudWatch, and Secrets Manager, plus Terraform for infrastructure provisioning.
• Practical experience using authorized AI-driven software development tools in professional settings, with the ability to thoroughly evaluate, verify, and enhance AI-generated outputs for correctness, security, and performance.
• An understanding of responsible AI usage principles, including data sensitivity, secure input/output handling, resilience, security expectations, and guiding peers on safe implementation within teams.

Preferred Skills and Attributes

• Knowledge of machine learning techniques and model training relevant to security applications.
• Experience with AWS Aurora PostgreSQL or comparable relational database systems.
• Familiarity with observability and monitoring platforms such as Dynatrace, Grafana, or Splunk.
• Working proficiency in Go or Java programming languages.
• Experience with automated functional and integration testing frameworks.

About JPMorganChase

J.P. Morgan is a global financial services leader, delivering strategic advice and products to prominent corporations, governments, affluent individuals, and institutional investors worldwide. Our commitment to exceptional business practices is central to all our endeavors, fostering trusted, long-term partnerships that help clients achieve their goals.

We pride ourselves on valuing diverse talent as a critical success factor. As an equal opportunity employer, we do not tolerate discrimination based on any protected characteristic such as race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital or veteran status, pregnancy, disability, or any other legally protected status. We also provide reasonable accommodations for applicants' and employees' religious observances and mental or physical disabilities.

Team Overview

Our Corporate Functions team covers a broad spectrum including finance, risk management, human resources, and marketing. These teams play an essential role in empowering the business, clients, customers, and employees for sustained success.