Software Engineer III - DevSecOps - Kubernetes Security
JPMorgan Chase6 days ago
London, United KingdomSenior
Responsibilities
- Define and enforce Kubernetes security controls across clusters, including access controls, workload security, network policies, and industry benchmarks.
- Build automation to detect, enrich, and report security findings and compliance posture across Kubernetes and cloud environments.
- Implement security guardrails and policy-as-code controls for secure configuration at scale.
- Assess and track vulnerabilities across Kubernetes clusters and workloads and support remediation prioritization.
- Contribute to software supply chain security through container image scanning, trusted registries, and dependency analysis.
- Embed security controls into infrastructure-as-code and automated delivery pipelines.
- Critically evaluate and validate outputs from enterprise-authorized AI coding assistance tools using peer review, automated testing, and secure coding standards.
Requirements
- Formal training or certification in software engineering concepts and proficient applied experience.
- Working knowledge of AWS, GCP, or Azure and core security services such as audit logging, threat detection, vulnerability scanning, and compliance posture management.
- Hands-on production experience securing Kubernetes and container orchestration, including access control, secrets management, workload security, network policies, and CIS Kubernetes Benchmark hardening.
- Hands-on experience with managed Kubernetes services such as AWS EKS, Google GKE, or Azure AKS.
- Exposure to infrastructure-as-code or policy-as-code using Terraform, Sentinel, Kyverno, or OPA.
- Hands-on experience building automation or tooling with Go; Python or other languages is valuable.
- Experience with GitOps and CI/CD tooling such as Argo CD and GitHub Actions.
- Ability to evaluate AI-assisted development outputs and apply responsible AI practices for data sensitivity and secure input and output handling.
- Preferred: CKS, a recognized cloud security certification, or equivalent Kubernetes and cloud security knowledge.
- Preferred: Crossplane exposure, software supply chain security knowledge including SBOM and dependency governance, multi-region cloud architecture awareness, and familiarity with UK FCA and PRA requirements.
Tech Stack
Categories
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.