Lead Security Engineer - Application Security
JPMorgan ChaseResponsibilities
- Design and implement enterprise-grade security solutions for complex technical and threat-based challenges.
- Develop secure production code and conduct code reviews to identify and remediate vulnerabilities.
- Monitor industry insights and regulatory guidance to improve security protocols and assess control effectiveness.
- Partner with stakeholders and senior business leaders on security requirements, risks, recommendations, and technical trade-offs.
- Architect and maintain tamper-proof, audit-defensible methods across technical areas and business functions.
- Build scalable, secure, and observable AWS solutions using cloud-native services and Terraform infrastructure provisioning.
- Use and critically validate enterprise-authorized AI-assisted development tools for coding, testing, troubleshooting, and documentation.
- Guide peers on responsible AI use, including data sensitivity, secure input and output handling, resiliency, and security.
Requirements
- Demonstrated ability to plan, design, and implement enterprise-level security solutions across complex, multi-domain environments.
- Advanced proficiency in Python with a focus on secure coding and security best practices.
- Proficiency across the software development lifecycle and understanding of security integration throughout it.
- Advanced understanding of agile methodologies and continuous integration and delivery practices, including Jenkins, GitHub, and Spinnaker.
- Ability to communicate effectively with senior business leaders about security risks, recommendations, and technical trade-offs.
- Hands-on experience with AWS Elastic Container Service, Elastic Compute Cloud, Lambda, EventBridge, S3, Identity and Access Management, CloudWatch, Secrets Manager, and Terraform.
- Hands-on experience using and evaluating enterprise-authorized AI-assisted software development tools and their outputs for correctness, performance, and security.
- Understanding of responsible AI use in engineering workflows and ability to guide peers on safe usage.
- Familiarity with machine learning methodologies and model training concepts for security use cases.
- Experience with AWS Aurora PostgreSQL or other SQL relational databases.
- Exposure to Dynatrace, Grafana, or Splunk.
- Working knowledge of Go or Java.
- Experience with automated functional and integration testing frameworks.
About JPMorgan Chase
With a history tracing its roots to 1799 in New York City, JPMorganChase is one of the world's oldest, largest, and best-known financial institutions—carrying forth the innovative spirit of our heritage firms in global operations across 100 markets. We serve millions of customers and many of the world’s most prominent corporate, institutional, and government clients daily, managing assets and investments, offering business advice and strategies, and providing innovative banking solutions and services. Social Media Terms and Conditions: https://bit.ly/JPMCSocialTerms JPMorgan Chase & Co. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.