Lead Cloud Security Engineer
JPMorgan Chase3 days ago
Bournemouth, United KingdomStaff+
Responsibilities
- Develop multi-year public-cloud information risk and control strategies, including vision, OKRs, and KRIs.
- Design and assess security controls, baselines, guardrails, and reusable patterns across AWS, Azure, and GCP.
- Lead cloud governance, risk acceptance, remediation, deviation tracking, audit readiness, and regulatory reporting.
- Define infrastructure-as-code security practices, policy-as-code guardrails, and automated pre-commit and pre-deploy controls.
- Partner with engineering, product, risk, security operations, threat intelligence, IAM, network security, and data protection teams.
- Build, mentor, and lead a matrixed team of security engineers and risk analysts.
- Drive cloud security tooling, automation, vendor evaluation, and telemetry/SOAR integrations.
- Lead threat modeling, tabletop exercises, post-incident reviews, and control enhancements.
- Use and validate enterprise-authorized AI capabilities for threat modeling, vulnerability analysis, documentation, code review, and security control validation.
Requirements
- Formal training or certification in security engineering concepts with advanced applied experience.
- Experience planning, designing, and implementing enterprise-level security solutions.
- Experience using enterprise-authorized AI capabilities in security engineering workflows, with strong validation and data-sensitivity practices.
- Ability to review and validate AI-assisted code and security recommendations before adoption.
- Advanced proficiency in one or more programming languages.
- Proficiency across SDLC execution, application resiliency, security, and agile delivery practices.
- Experience with threat modeling, discovery, vulnerability assessment, and penetration testing.
- Deep public-cloud security expertise across identity and access management, network segmentation, data protection, logging and monitoring, and native cloud services.
- Experience leading cross-functional security programs and influencing VP-level or higher stakeholders.
- Experience translating policy and risk requirements into practical designs and policy-as-code guardrails.
- Hands-on familiarity with Terraform, infrastructure-as-code security, DevSecOps, and CI/CD workflows.
- Advanced cloud or security certifications and experience operating CSPM, CIEM, or CWPP solutions are preferred.
Tech Stack
Categories
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.