Join a team that protects one of the world's most complex technology environments — not by writing policy, but by building the software and platforms that make security scale. At JPMorganChase, engineers like you have the opportunity to ship production code that runs at genuinely massive scale, solve hard problems across a global endpoint estate, and grow your craft alongside some of the most talented engineers in financial services.
As a Lead Security Engineer at JPMorganChase within the Cybersecurity and Technology Controls — Employee Compute team, you will serve as the technical anchor for a portfolio of high-impact endpoint security platforms and automation programs spanning hundreds of thousands of Mac, Windows, Linux, and virtual desktop endpoints. You will set technical direction, drive day-to-day engineering execution, and raise the bar through design and code reviews — all while remaining hands-on in the code. This is a senior individual contributor role for an engineer who leads through technical excellence and delivery, not through a management hierarchy.
Our team lives at the intersection of DevOps, platform engineering, and full-stack development. You will build and operate systems that govern endpoint authentication, binary execution controls, and policy deployment automation — replacing brittle manual processes with auditable, resilient pipelines built on GitOps principles. If you want your work to matter and to run everywhere, this is the role for you.
Job responsibilities
- Design, build, and ship production-quality software across Mac, Windows, Linux, and virtual desktop environments, serving as the primary technical contributor for a portfolio of endpoint security platforms
- Architect and operate a managed binary allowlisting platform deployed via infrastructure-as-code in a private cloud environment, including automation that generates per-binary rules at application-packaging time
- Develop and maintain cross-platform endpoint authentication tooling — written in a compiled language — that enables applications to authenticate through enterprise proxy infrastructure, including upcoming support for containerized deployment
- Modernize system policy deployment across Windows and virtual desktop environments using GitOps principles, building automated pipelines that scan, grade, and deploy changes in a controlled, auditable manner
- Drive technical direction and day-to-day execution across the team's engineering portfolio, ensuring delivery against milestones while maintaining high standards for code quality, security, and resilience
- Conduct rigorous design and code reviews, mentoring associate engineers and elevating the technical capabilities of the team through hands-on guidance
- Identify manual, high-overhead processes and architect automation solutions that eliminate operational toil and scale across the firm's endpoint estate
- Collaborate cross-functionally with application teams, infrastructure, and security stakeholders to ensure platforms are consumable, audit-defensible, and aligned to enterprise standards
- Apply secure development practices throughout the full software development lifecycle, designing controls that are tamper-resistant and hold up to regulatory scrutiny
Required qualifications, capabilities, and skills
- Formal training or certification on security engineering concepts and 5+ years applied experience
- Advanced proficiency in one or more major programming languages such as Python, Java, JavaScript/TypeScript, Go, Rust, or C++, with a demonstrated ability to build and ship production software
- Hands-on enterprise experience managing at least two of the following endpoint platforms: Mac, Windows, virtual desktop infrastructure, or Linux
- Proven experience with containers (Docker, Kubernetes), public cloud platforms, and infrastructure-as-code tooling
- Proficiency across the full software development lifecycle, including CI/CD pipelines, GitOps workflows, and automated testing practices
- Working knowledge of secure development practices with the ability to design, build, and operate controls that are audit-defensible and tamper-resistant
- Demonstrated ability to decompose complex, ambiguous technical problems into clearly scoped, deliverable engineering work
- Experience serving as a technical lead — driving execution, setting technical direction, and mentoring engineers through code reviews — while remaining hands-on in the codebase
Preferred qualifications, capabilities, and skills
- Experience building security-focused or systems-level software on Mac, Windows, or Linux platforms
- Familiarity with endpoint security concepts such as binary allowlisting, proxy and authentication flows, or system policy management
- Experience implementing or evolving security controls within a large, regulated enterprise environment
- Background in banking, financial services, or another highly regulated industry such as insurance or healthcare
- Experience as a full-stack developer in a large enterprise environment, with comfort across both application and infrastructure layers
Experience responsibly using enterprise-authorized AI capabilities to accelerate development and validation, with strong habits around output validation and data sensitivity
#CTC
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Skills Required
- Formal training or certification on security engineering concepts
- 5+ years applied security engineering experience
- Advanced proficiency in one or more: Python, Java, JavaScript/TypeScript, Go, Rust, or C++
- Hands-on enterprise experience managing at least two endpoint platforms: Mac, Windows, virtual desktop infrastructure, or Linux
- Proven experience with containers (Docker, Kubernetes), public cloud platforms, and infrastructure-as-code tooling
- Proficiency across the full software development lifecycle including CI/CD pipelines, GitOps workflows, and automated testing practices
- Working knowledge of secure development practices and ability to design audit-defensible, tamper-resistant controls
- Demonstrated ability to decompose complex technical problems into scoped deliverable engineering work
- Experience serving as a technical lead driving execution, setting technical direction, and mentoring engineers while remaining hands-on in code
- Experience building security-focused or systems-level software on Mac, Windows, or Linux platforms
- Familiarity with endpoint security concepts such as binary allowlisting, proxy and authentication flows, or system policy management
- Experience implementing or evolving security controls within a large, regulated enterprise environment
- Background in banking, financial services, or another highly regulated industry (insurance, healthcare)
- Experience as a full-stack developer comfortable across application and infrastructure layers in a large enterprise
- Experience responsibly using enterprise-authorized AI capabilities to accelerate development and validation
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Medical, dental, vision, and mental-health coverage are broad, with wellness incentives, on-site or virtual care, and an EAP offering coaching and counseling. Plan materials emphasize accessible options, including multiple medical choices and tools to manage costs.
-
Parental & Family Support — Paid parental leave extends up to 16 weeks for all parents, supplemented by paid Critical Caregiver Leave. Family resources include backup childcare via Bright Horizons, lactation support and milk-shipping, family-building assistance, and even a free five-month SNOO rental for newborns.
-
Retirement Support — Retirement programs include a 401(k) with an annual company match and automatic pay credits for most employees, with a legacy pension available to earlier hires. An Employee Stock Purchase Plan at a 5% discount further supports long-term savings.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery
.png)
