As a Lead Software Security Engineer at JPMorganChase, you are an integral part of an agile team that works to enhance, build, and deliver trusted technology products in a secure, stable, and scalable way. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of challenges that span multiple technologies and applications.
Job responsibilities
- Facilitate security requirements clarification for multiple networks to enable multi-level security, satisfying organizational needs for both ingress and egress traffic. Work at code-level using java/ Python and drive the maturity of the Cybersecurity software development lifecycle with an advanced understanding of line of business technology drivers.
- Perform deployment, administration, management, configuration, testing, documentation, operations, and integration tasks related to Cloud Network Security Platforms, championing a DevOps security model to ensure security is automated and elastic across all platforms.
- Lead and develop new Cloud Security Implementations for both ingress and egress traffic. Design and develop strategies to provide end-to-end automation, architecture design, performance and monitoring, best practices, proof of concepts, product design, and transition to operations.
- Ensure quality control of engineering deliverables and ensure firm policies are compliant with strict security standards. Drive decision-making by analyzing complex data systems, ensuring all engineering activities are in conformance with firm policies & objectives. Leverage DevOps tools to build, harden, maintain, and develop a comprehensive Cloud-based security orchestration platform for network security and infrastructure as code. Develop automated security and compliance capabilities in support of DevOps processes in a large-scale Cloud computing environment.
- Collaborate with technologists, stakeholders, and senior business leaders to recommend business modifications during periods of vulnerability. Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events.
- Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations. Collaborate with cross-functional teams, including IT, development, and operations, to ensure web application security.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
Required qualifications, capabilities, and skills
- Formal training or certification on Security Engineering concepts and 5+ years of applied experience.
- Advanced hands-on coding experience in java or Python/Go and Terraform. Expertise with AWS Infrastructure such as networking, EC2, Lambdas, server-less solutions, VPC, Route 53, autoscaling, Transit Gateway, API Gateway, Step Functions, secrets manager, and storage services.
- Proficient in core concepts for Networking, Infrastructure as Code (IaaC), Public Cloud architecture, and Cloud Security.
- Expertise in developing and designing complex cloud architectures, deploying scalable solutions, creating, and handling CI/CD pipelines, application resiliency, security design and implementation, and triaging issues in Agile Software Development Lifecycle methodology.
- Extensive experience with threat modeling, discovery, vulnerability, and penetration testing. Ability to tackle design and functionality problems independently with little to no oversight.
- Experience with WAF technologies such as AWS WAF, Akamai, Cloudflare, or similar.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
Preferred qualifications, capabilities, and skills
- API Gateway Development
- Custom proxy development
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Skills Required
- Formal training or certification in security engineering concepts
- 5+ years of applied security engineering experience
- Advanced hands-on coding experience in Java, Python, or Go
- Advanced hands-on experience with Terraform
- Expertise with AWS infrastructure, including networking, EC2, Lambda, VPC, Route 53, autoscaling, Transit Gateway, API Gateway, Step Functions, Secrets Manager, and storage services
- Proficiency in networking, Infrastructure as Code, public cloud architecture, and cloud security
- Experience designing complex cloud architectures and deploying scalable solutions
- Experience creating and managing CI/CD pipelines
- Experience with application resiliency, security design and implementation, and Agile software development lifecycles
- Extensive experience with threat modeling, vulnerability discovery, and penetration testing
- Ability to independently solve design and functionality problems with little to no oversight
- Experience with WAF technologies such as AWS WAF, Akamai, Cloudflare, or similar
- Experience using enterprise-authorized AI capabilities for security engineering workflows, with validation and data-sensitivity awareness
- Ability to review and validate AI-assisted code and security recommendations
- API Gateway development
- Custom proxy development
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Medical, dental, vision, and mental-health coverage are broad, with wellness incentives, on-site or virtual care, and an EAP offering coaching and counseling. Plan materials emphasize accessible options, including multiple medical choices and tools to manage costs.
-
Parental & Family Support — Paid parental leave extends up to 16 weeks for all parents, supplemented by paid Critical Caregiver Leave. Family resources include backup childcare via Bright Horizons, lactation support and milk-shipping, family-building assistance, and even a free five-month SNOO rental for newborns.
-
Retirement Support — Retirement programs include a 401(k) with an annual company match and automatic pay credits for most employees, with a legacy pension available to earlier hires. An Employee Stock Purchase Plan at a 5% discount further supports long-term savings.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery
