Join us to play a pivotal role in advancing cloud security at one of the world’s most influential companies. You’ll be part of a high-performing team, delivering secure cloud infrastructure solutions that protect our assets and drive innovation. Your expertise will help shape the future of technology and security, offering you opportunities for growth and career mobility. We value your unique skills and encourage you to bring your ideas and passion for security to our collaborative environment. Experience a culture that champions diversity, equity, inclusion, and respect.
As a Lead Cloud Security Engineer in the Cyber and Tech Controls team, you will deliver software solutions that meet functional and user requirements while preventing misuse and malicious behavior. You will help define and implement secure cloud strategies, working closely with business technology teams to ensure robust controls across diverse cloud architectures. Your role will directly influence the security posture of our cloud platforms and contribute to a culture of innovation and inclusion.
Job Responsibilities:
- Support business technology teams in understanding and implementing firm control requirements across cloud architectures
- Apply specialized tools to analyze, correlate, identify, interpret, and summarize threats and vulnerabilities
- Support the execution and enhancement of long-term information risk and controls strategies for public cloud security
- Deliver threat models and risk-based assessments for cloud services, platforms, and architectural components
- Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately
- Perform security reviews of infrastructure-as-code for cloud platform development
- Develop preventive and detective controls to enforce security requirements
- Interface with wider teams to ensure platform integration with security operations, threat intelligence, access management, and network security
- Execute creative security solutions, design, development, and technical troubleshooting
- Develop secure, high-quality production code and review and debug code written by others
Apply reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations
Required Qualifications, Capabilities, and Skills:
- Formal training or certification in security engineering concepts
- Experience developing security engineering and architecting solutions within public cloud technologies
- Knowledge of cloud security posture management (e.g., Wiz, Prisma Cloud, Crowd Strike Falcon Cloud Security)
- Knowledge of Kubernetes and container orchestration concepts, including managed services such as EKS, AKS, or GKE
- Experience engineering with infrastructure as code (e.g., Terraform, Cloud Formation)
- Ability to convey complex security concepts to technical stakeholders
- Cloud native experience (e.g., AWS, Azure, or Google Cloud)
- Skilled in planning, designing, and implementing enterprise-level security solutions
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity
Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
Preferred Qualifications, Capabilities, and Skills:
- Cybersecurity certifications (e.g., Security, CEH, CCSP, GSEC)
Cloud certifications (e.g., AWS, Azure, or GCP)
Why Join Us?
You’ll be empowered to make a meaningful impact, work with cutting-edge technology, and grow your career in a supportive, inclusive environment. We celebrate diverse perspectives and encourage you to bring your authentic self to work every day.
About UsJ.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
Skills Required
- Formal training or certification in security engineering concepts
- Experience developing security engineering and architecture solutions within public cloud technologies
- Knowledge of cloud security posture management tools such as Wiz, Prisma Cloud, or CrowdStrike Falcon Cloud Security
- Knowledge of Kubernetes and container orchestration, including managed services such as EKS, AKS, or GKE
- Experience engineering with infrastructure as code, such as Terraform or CloudFormation
- Ability to communicate complex security concepts to technical stakeholders
- Cloud-native experience with AWS, Azure, or Google Cloud
- Experience planning, designing, and implementing enterprise-level security solutions
- Experience using authorized AI capabilities to support security engineering workflows, with validation and data-sensitivity awareness
- Ability to review and validate AI-assisted code and security recommendations before adoption
- Cybersecurity certifications such as Security+, CEH, CCSP, or GSEC
- Cloud certifications such as AWS, Azure, or GCP certifications
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Medical, dental, vision, and mental-health coverage are broad, with wellness incentives, on-site or virtual care, and an EAP offering coaching and counseling. Plan materials emphasize accessible options, including multiple medical choices and tools to manage costs.
-
Parental & Family Support — Paid parental leave extends up to 16 weeks for all parents, supplemented by paid Critical Caregiver Leave. Family resources include backup childcare via Bright Horizons, lactation support and milk-shipping, family-building assistance, and even a free five-month SNOO rental for newborns.
-
Retirement Support — Retirement programs include a 401(k) with an annual company match and automatic pay credits for most employees, with a legacy pension available to earlier hires. An Employee Stock Purchase Plan at a 5% discount further supports long-term savings.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery





