Lead Cloud Security Engineer - GCP

Testing Site - JPMC; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

JPMorgan Chase, within the Cybersecurity & Technology Controls group, seeks a Cloud Security Engineer to ensure secure and compliant public cloud adoption. You will identify risks and guide technology teams with detail and strategic vision across security issues.

You will lead risk-based assessments, shape control strategies for cloud platforms (AWS/GCP/Azure), mentor engineers, and collaborate with IAM and network security teams to raise the bar on security engineering.

Qualifications

• Formal training or certification on security engineering concepts.
• 5+ years of applied experience in security engineering.

Responsibilities

• Lead the execution and continuous improvement of information risk and control strategies to secure public cloud assets.
• Conduct and oversee risk-based assessments of technology controls for cloud services, platforms, and architecture.
• Advise and guide business technology teams on firm control requirements and best practices across diverse cloud architectures.
• Review and provide feedback on infrastructure-as-code for cloud platform development, ensuring alignment with security standards.
• Develop and maintain documentation, and contribute to agile processes supporting security initiatives.
• Collaborate with CTC teams to ensure seamless integration with security operations, threat intelligence, IAM, and network security.
• Mentor junior engineers and contribute to knowledge sharing within the team.

Skills

Cloud security

Risk assessment

Security architecture

Cross-functional collaboration

Communication

Education

Security engineering certification

Tools

Terraform

AWS

GCP

Azure

Job description

As a Cloud Security Engineer at JPMorgan Chase within the Cybersecurity & Technology Controls (CTC) group, your primary responsibility will be to ensure that Public Cloud is adopted in a secure and compliant manner. You will play an important role in identifying and managing risk related issues and actions with respective technology. You will have an eye for detail and an ability to see the big picture across security issues.

Job responsibilities

• Lead the execution and continuous improvement of information risk and control strategies to secure public cloud assets.
• Conduct and oversee risk-based assessments of technology controls for cloud services, platforms, and architecture.
• Advise and guide business technology teams on firm control requirements and best practices across diverse cloud architectures.
• Review and provide feedback on infrastructure-as-code for cloud platform development, ensuring alignment with security standards.
• Develop and maintain documentation, and contribute to agile processes supporting security initiatives.
• Collaborate with CTC teams to ensure seamless integration with security operations, threat intelligence, IAM, and network security.
• Mentor junior engineers and contribute to knowledge sharing within the team.

Required qualifications, capabilities, and skills

• Formal training or certification on security engineering concepts and 5+ years applied experience.
• Strong analytical, problem-solving, and communication skills.
• Experience planning, designing, building and implementing enterprise level security engineering products and solutions in a public cloud environment (i.e. AWS, GCP, Azure)
• Experience working in cross-functional teams and managing multiple priorities.

Preferred qualifications, capabilities, and skills

• Advanced understanding of public cloud security concepts and technologies.
• Hands-on experience with cloud engineering, architecture, and infrastructure-as-code (Terraform, etc.).
• Familiarity with DevOps, CI/CD, and agile methodologies.
• Experience mentoring or training junior staff.