Lead Security Engineer

ZipRecruiter; England; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading financial institution is seeking a Lead Security Engineer to enhance software security across cloud environments. This role involves designing security best practices, integrating security into CI/CD pipelines, and collaborating with teams to address security needs. Ideal candidates will have significant experience in cloud engineering and strong automation skills.

Qualifications

• 5+ years of experience in cloud engineering or DevOps.
• Experience in designing enterprise security solutions.

Responsibilities

• Design and enforce security best practices in public cloud environments.
• Integrate security testing into CI/CD pipelines.
• Develop frameworks for automated threat detection.

Skills

Cloud Security

Automation

Scripting

Analytical Problem-Solving

Agile Methodologies

Education

Certification in Engineering or Cybersecurity

Tools

Kubernetes

Docker

Job description

Job DescriptionJob Description

As a Platform Engineer at JPMorgan Chase within the Platform SDLC team, you are central to our mission of delivering innovative solutions to our customers. You thrive in collaborative environments, are passionate about new technologies, and possess a solution-oriented mindset with a strong understanding of fintech. You will work within tribes and squads focused on specific products and projects, with opportunities to move between them based on your strengths and interests.

We value diversity and believe that different perspectives make our team stronger. By bringing together individuals from varied backgrounds, we aim to reflect the communities we serve and make a meaningful impact globally.

In this role, you will be part of a high-performing team delivering secure software solutions, contributing to shaping the future of software security at one of the world's largest financial institutions.

As a Lead Security Engineer within the Platform team, you will work on delivering software that meets functional and user requirements while preventing misuse and malicious activities. You will carry out critical technology solutions with tamper-proof and audit-ready methods across multiple technical domains and business functions.

Job Responsibilities

1. Design and enforce security best practices in public cloud environments (AWS, Azure, GCP).
2. Define and implement infrastructure as Code (IaC), CI/CD pipelines, and automation tools.
3. Integrate security testing into CI/CD pipelines (e.g., SCA, SAST, DAST).
4. Perform code reviews, threat modeling, and vulnerability assessments.
5. Develop production deployment strategies, thinking beyond routine approaches.
6. Create scripts and automation to streamline security operations, using Python or Go.
7. Collaborate with third-party vendors and internal teams effectively.
8. Maintain security protocols aligned with industry best practices and regulations.
9. Evaluate security architecture for simplification, optimization, and automation.
10. Work with stakeholders to understand and address security needs.
11. Analyze architecture, applications, and processes for security improvements.
12. Develop frameworks and tools for automated threat detection.
13. Ensure security controls are tested and hardened during deployment.
14. Assess technology risks, including cybersecurity and application security threats.
15. Build relationships with external teams and share knowledge for mutual benefit.

Required Qualifications, Capabilities, and Skills

1. Formal training or certification in Engineering or Cybersecurity, with 5+ years of experience in cloud engineering, DevOps, or similar roles involving enterprise software deployment on public clouds.
2. Experience in designing and implementing enterprise security solutions.
3. Strong scripting skills for automation and integration.
4. Proficiency across the Software Development Life Cycle.
5. Analytical problem-solving skills and ability to tackle complex challenges.
6. Deep understanding of agile methodologies, CI/CD, application resiliency, and security.
7. Experience with Security Testing in CI/CD pipelines.
8. Knowledge of Cloud Security, including Kubernetes and Docker.

Additional Qualifications

1. Cloud certifications focusing on GCP, such as Certified Solutions Architect or DevOps Engineer.
2. Experience deploying enterprise software at scale.
3. Effective communication skills with senior business leaders.

About Us

J.P. Morgan is a global leader in financial services, offering strategic advice and products to top corporations, governments, and investors worldwide. We are committed to building trusted, long-term relationships and fostering a diverse and inclusive environment.

About The Team

Our Corporate Functions team supports finance, risk, HR, and marketing, playing a vital role in our success and ensuring our teams are well-equipped for future challenges.