About the role
What will you do at JPMorganChase?
Join one of the world's most influential financial institutions and help build
the technology that protects it. At JPMorganChase, our cybersecurity engineering
teams operate at a scale few organizations can match — and we're looking for
bold, technically deep engineers who want to make a real impact.
As a Lead Security Engineer at JPMorganChase within the Cyber Technology &
Controls organization, you will lead the design, engineering, and lifecycle
management of platforms that power cybersecurity operations across the firm. You
will help build and operate secure, resilient, and scalable capabilities used
for security testing, adversarial simulation, vulnerability research, attack
analysis, and validation of cyber defenses — spanning cloud and on-premises
environments. Your work will directly shape the technical strategy and
engineering standards that protect one of the world's largest financial
institutions, and you will collaborate across cybersecurity, infrastructure,
cloud, and enterprise technology teams to continuously deliver and improve
mission-critical services.
Job responsibilities
* Lead the strategy, architecture, engineering, and lifecycle management of
platforms supporting cybersecurity operations across cloud and on-premises
environments
* Translate cybersecurity mission requirements into modern, secure, scalable,
and reusable technology capabilities that serve the firm at enterprise scale
* Design and operate complex hybrid environments spanning cloud infrastructure,
networks, systems, virtualization, storage, identity, and security tooling
* Engineer integrations between security platforms, enterprise services,
infrastructure, and operational workflows to improve reliability and
operational efficiency
* Develop software, automation, infrastructure-as-code, and continuous
integration and delivery capabilities that drive repeatability and reduce
operational risk
* Establish and uphold standards for secure configuration, access management,
monitoring, logging, patching, backup, recovery, and technology lifecycle
management
* Define and continuously improve platform resiliency, availability, capacity,
performance, and recovery objectives to meet mission and regulatory
expectations
* Lead technical troubleshooting, incident response, root-cause analysis, and
remediation for platform and service issues
* Establish measurable operational controls and evidence practices that support
auditability and regulatory compliance
* Leverage enterprise-authorized AI and large language model capabilities to
accelerate engineering, security analysis, testing, documentation, and
automation — while validating outputs and protecting sensitive information
* Build strong partnerships across cybersecurity, infrastructure, cloud,
software engineering, and enterprise technology teams to deliver new
capabilities and drive continuous improvement
Required qualifications, capabilities, and skills
* Formal training or certification on software engineering concepts and 10+
years applied experience
* Demonstrated experience leading the architecture, engineering, and operation
of complex enterprise or mission-critical platforms
* Strong experience across several of the following areas: cloud infrastructure
and cloud security, network engineering and administration, systems
administration and virtualization, storage and compute operations, software
development and enterprise integrations, automation and
infrastructure-as-code, cybersecurity platforms and security tooling,
identity and access management, or platform resiliency and observability
* Advanced programming or scripting skills in one or more languages such as
Python, Go, Java, JavaScript/TypeScript, PowerShell, or Bash
* In-depth experience with AWS, Azure, Google Cloud Platform, or comparable
cloud platforms
* Experience building automation and integrations across security,
infrastructure, cloud, and enterprise technology services
* Experience with secure software development lifecycle practices, threat
modeling, vulnerability management, security testing, and platform resiliency
* Demonstrated experience using enterprise-authorized AI and large language
model capabilities in engineering or security workflows, including the
ability to evaluate outputs for security, correctness, reliability, and
compliance
* Strong communication, stakeholder management, and technical leadership skills
with the ability to influence decisions across organizational boundaries and
engage effectively with senior technical and business stakeholders
Preferred qualifications, capabilities, and skills
* Advanced degree or relevant professional qualification in computer science,
engineering, cybersecurity, or a related field
* Industry certifications such as Certified Information Systems Security
Professional (CISSP), Certified Cloud Security Professional (CCSP),
Security+, AWS Security Specialty, or equivalent
* Experience supporting security operations, security testing, threat
emulation, vulnerability research, attack analysis, or cyber-defense
validation
* Experience with Kubernetes, containers, immutable infrastructure, or
cloud-native platform engineering
* Experience with infrastructure-as-code and pipeline tooling such as
Terraform, Ansible, Jenkins, GitHub Actions, or GitLab CI
* Experience with GPU-enabled infrastructure, AI/ML platforms, model-serving
systems, or high-performance computing environments
* Familiarity with threat-informed defense principles and frameworks such as
MITRE ATT&CK, and experience establishing service-level objectives,
operational metrics, and disaster-recovery plans
#CTC
JPMorganChase, one of the oldest financial institutions, offers innovative
financial solutions to millions of consumers, small businesses and many of the
world’s most prominent corporate, institutional and government clients under the
J.P. Morgan and Chase brands. Our history spans over 200 years and today we are
a leader in investment banking, consumer and small business banking, commercial
banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined
based on the role, experience, skill set and location. Those in eligible roles
may receive commission-based pay and/or discretionary incentive compensation,
paid in the form of cash and/or forfeitable equity, awarded in recognition of
individual achievements and contributions. We also offer a range of benefits and
programs to meet employee needs, based on eligibility. These benefits include
comprehensive health care coverage, on-site health and wellness centers, a
retirement savings plan, backup childcare, tuition reimbursement, mental health
support, financial coaching and more. Additional details about total
compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring
to our global workforce are directly linked to our success. We are an equal
opportunity employer and place a high value on diversity and inclusion at our
company. We do not discriminate on the basis of any protected attribute,
including race, religion, color, national origin, gender, sexual orientation,
gender identity, gender expression, age, marital or veteran status, pregnancy or
disability, or any other basis protected under applicable law. We also make
reasonable accommodations for applicants’ and employees’ religious practices and
beliefs, as well as mental health or physical disability needs. Visit our FAQs
[https://careers.jpmorgan.com/us/en/how-we-hire/faqs] for more information about
requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including
Disability/Veterans
Our professionals in our Corporate Functions cover a diverse range of areas from
finance and risk to human resources and marketing. Our corporate teams are an
essential part of our company, ensuring that we’re setting our businesses,
clients, customers and employees up for success.
Which skills does this role require?
Make your next move
Build a shortlist and prepare
Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.
- Build a focused shortlist before you applyCompare role requirements with your experience and give each application a clear reason.
- Practice explaining your experience in an interviewRehearse your answers before meeting the hiring team.
Other roles to compare
Review the responsibilities and requirements before adding an opening to your shortlist.
Staff Product Security Engineer
Typeface · Palo Alto, CA
Security Engineer
VerSprite Cybersecurity · Remote
Lead Security Engineer - SME (R-00242)
True Zero Technologies · D.C./ MD / VA
Mission Security Administrator II
True Anomaly · Denver, CO; Long Beach, CA
Senior Manager, Services Portfolio & Learning Architecture
Tenable · US - Remote - Illinois, US - Hybrid - Massachusetts - Boston, US - Remote - North Carolina, US - Remote - New York, US - Remote - Texas , US - Headquarters - Maryland - Columbia
Senior Security Engineer - US
VulnCheck · Remote US
Role information can change. Confirm current details on the original application page.
