Lead Security Engineer - Platform & DevSecOps

JPMorganChase; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A global financial services firm is looking for a Lead Security Engineer to enhance the security of software delivery processes. This role involves collaborating with engineering teams to design and implement security controls within CI/CD pipelines, improve supply chain security, and address security risks in cloud environments. Ideal candidates should have experience in software engineering roles and a strong understanding of modern security practices. The position promotes a culture of innovation and diverse perspectives, located in Greater London.

Qualifications

• Hands-on experience deploying systems in public cloud environments.
• Ability to design security controls within CI/CD pipelines.
• Proficiency in at least one programming or scripting language.
• Solid understanding of integrating security practices into the Software Development Life Cycle.
• Experience with security testing in CI/CD environments.
• Familiarity with containerization and orchestration platforms.
• Strong problem-solving skills for practical security solutions.
• Good understanding of modern engineering practices.

Responsibilities

• Design and operate scalable security capabilities for engineering workflows.
• Implement automated controls in the software development lifecycle.
• Enhance software supply chain security with SBOM generation.
• Analyze vulnerability data for effective remediation.
• Guide engineering teams on security issues.
• Assess security risks in runtime and cloud environments.
• Develop incident response processes and tooling.

Skills

Hands-on experience in software, platform, or cloud engineering

Design and implement security controls in CI/CD pipelines

Programming or scripting language proficiency

Understanding of Software Development Life Cycle

Security testing and controls experience

Familiarity with cloud-native technologies

Analytical and problem-solving skills

Knowledge of CI/CD and secure software delivery

Tools

Snyk

Wiz

Job description

A global financial services firm is looking for a Lead Security Engineer to enhance the security of software delivery processes. This role involves collaborating with engineering teams to design and implement security controls within CI/CD pipelines, improve supply chain security, and address security risks in cloud environments. Ideal candidates should have experience in software engineering roles and a strong understanding of modern security practices. The position promotes a culture of innovation and diverse perspectives, located in Greater London.