Lead Security Engineer

Join our high-performing security engineering team and make a real impact at JPMorganChase. You will lead the design and delivery of secure software solutions that protect our business and drive innovation. As a Lead Security Engineer, you’ll expand your skills, collaborate with talented colleagues, and help shape the future of software security. Experience a culture where your ideas are valued, your growth is supported, and your expertise drives change. Discover opportunities for advancement and leadership in a dynamic environment.

As a Lead Security Engineer in Cybersecurity and Tech Controls, you will play a crucial role in delivering secure software solutions that prevent misuse, circumvention, and malicious behavior. You will be a core technical contributor, responsible for implementing tamper-proof, audit-defensible methods across multiple technical areas. You will develop and manage container-based services, drive the control plane for our container security system, and work closely with stakeholders to understand and address security needs. Your leadership will help us minimize vulnerabilities, evolve security protocols, and foster a culture of diversity, opportunity, inclusion, and respect.

Job responsibilities

• Execute creative security solutions, design, development, and technical troubleshooting.
• Develop secure and high-quality production code; review and debug code from other team members.
• Minimize security vulnerabilities by evolving protocols and following industry insights and regulations.
• Plan, design, and implement enterprise-level security solutions.
• Develop and manage the control plane for container security systems.
• Design and develop container-based services using Docker and Kubernetes.
• Conduct discovery, vulnerability, penetration testing, and threat modeling for multiple applications.
• Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability.
• Manage multiple tasks and priorities in a fast-paced, dynamic environment.
• Proactively identify and address security risks across organizational assets.
• Add to team culture of diversity, opportunity, inclusion, and respect.

Required qualifications, capabilities, and skills

• Formal training or certification in software engineering with relevant years of experience (please insert specific years based on role level).
• Skilled in planning, designing, and implementing enterprise-level security solutions.
• Advanced proficiency in one or more programming languages.
• Proficient in all aspects of the Software Development Life Cycle.
• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
• Experience with threat modeling, discovery, vulnerability, and penetration testing.
• In-depth knowledge of the financial services industry and their IT systems.
• Hands-on practical experience in system design, application development, testing, and operational stability.
• Technologies: Kubernetes, Terraform.
• Cloud experience: AWS, on-prem.
• Deep understanding of Docker images and containers.
• Experience with RBAC systems.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders.
• Technologies: Python, Java, Ansible, Artifactory, Active Directory, Jenkins.
• Deep understanding of cybersecurity.
• Knowledge of Active Directory.