Lead Security Engineer - Attack Simulation Engineer
JPMorgan Chase15 hours ago
Responsibilities
- Lead strategy, architecture, engineering, and lifecycle management for cybersecurity operations platforms across cloud and on-premises environments.
- Translate cybersecurity mission requirements into secure, scalable, reusable enterprise technology capabilities.
- Design and operate hybrid environments involving cloud infrastructure, networks, systems, virtualization, storage, identity, and security tooling.
- Engineer integrations across security platforms, enterprise services, infrastructure, and operational workflows.
- Develop software, automation, infrastructure-as-code, and continuous integration and delivery capabilities.
- Establish standards for secure configuration, access management, monitoring, logging, patching, backup, recovery, and technology lifecycle management.
- Improve platform resiliency, availability, capacity, performance, and recovery objectives.
- Lead troubleshooting, incident response, root-cause analysis, and remediation for platform and service issues.
- Establish operational controls and evidence practices supporting auditability and regulatory compliance.
- Use enterprise-authorized AI and large language model capabilities for engineering, security analysis, testing, documentation, and automation while validating outputs and protecting sensitive information.
- Partner with cybersecurity, infrastructure, cloud, software engineering, and enterprise technology teams to deliver and improve capabilities.
Requirements
- Formal training or certification in software engineering concepts and 10+ years of applied experience.
- Experience leading architecture, engineering, and operation of complex enterprise or mission-critical platforms.
- Strong experience across several areas including cloud infrastructure and security, networking, systems administration and virtualization, storage and compute operations, software development and integrations, automation and infrastructure-as-code, cybersecurity platforms, identity and access management, or platform resiliency and observability.
- Advanced programming or scripting skills in one or more of Python, Go, Java, JavaScript/TypeScript, PowerShell, or Bash.
- In-depth experience with AWS, Azure, Google Cloud Platform, or comparable cloud platforms.
- Experience building automation and integrations across security, infrastructure, cloud, and enterprise technology services.
- Experience with secure software development lifecycle practices, threat modeling, vulnerability management, security testing, and platform resiliency.
- Experience using enterprise-authorized AI and large language model capabilities in engineering or security workflows, including evaluating outputs for security, correctness, reliability, and compliance.
- Strong communication, stakeholder management, and technical leadership skills.
- Preferred: advanced degree or relevant professional qualification in computer science, engineering, cybersecurity, or a related field.
- Preferred: CISSP, CCSP, Security+, AWS Security Specialty, or equivalent certification.
- Preferred: experience with security operations, security testing, threat emulation, vulnerability research, attack analysis, or cyber-defense validation.
- Preferred: experience with Kubernetes, containers, immutable infrastructure, cloud-native platform engineering, infrastructure-as-code, pipeline tooling, GPU-enabled infrastructure, AI/ML platforms, model-serving systems, or high-performance computing.
- Preferred: familiarity with threat-informed defense frameworks such as MITRE ATT&CK and experience establishing service-level objectives, operational metrics, and disaster-recovery plans.
Benefits
- Competitive total rewards package and role-based base salary determination, with eligible roles potentially receiving commission-based pay or discretionary incentive compensation.
- Comprehensive health care coverage and on-site health and wellness centers.
- Retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching.
- Equal opportunity employer with reasonable accommodation support.
Tech Stack
AnsibleAWSAzureBashGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformJavaJavaScriptJenkinsKubernetesPowerShellPythonTerraformTypeScript
Categories
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.