Security Engineer III

JPMorgan Chase & Co.; Christchurch; On-site; GBP 95,000 - 135,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer III - Cloud and Infrastructure within the Cybersecurity & Technology Controls.

You will design, implement, and maintain security solutions for an enterprise-scale environment, working across Windows and Linux internals, IaC, and CI/CD pipelines. You will collaborate with vendors and internal teams to minimize vulnerabilities and implement secure production code.

Qualifications

• Experience in security engineering across cloud and infrastructure.
• Strong knowledge of Windows and Linux internals.
• Excellent communication with senior leaders and stakeholders.
• AWS certifications or similar cloud security qualifications preferred.
• Experience deploying security solutions at enterprise scale.

Responsibilities

• Design, implement, and maintain security solutions for an enterprise-scale environment.
• Understand systems engineering, integrations, and administration roles.
• Execute on key deliverables in security engineering space.
• Develop production deployments with scalable, beyond-routine approaches.
• Develop secure production code and review code written by others.
• Implement complex business logic in Python, Bash, and PowerShell.
• Engage with third-party vendors and internal teams.
• Minimize security vulnerabilities by applying industry standards and regulations.
• Collaborate with stakeholders to address security needs during vulnerabilities.

Skills

Python

Bash

PowerShell

IaC

CI/CD pipelines

Cloud security

AWS

Linux systems

Windows systems

Automation tooling

SDLC knowledge

Vendors coordination

Security engineering

Agile methodologies

Tools

Terraform

Job description

As a Security Engineer III - Cloud and Infrastructure at JPMorgan Chase within the Cybersecurity & Technology Controls, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.,

• Design, implement, and maintain security solutions for an enterprise-scale environment


• Understand the functions of systems engineering, systems integrations, and systems administration roles


• Execute on key deliverables in the security engineering space


• Design and develop production deployments with the ability to think beyond routine or conventional approaches in order to deliver technology solutions for key stakeholders


• Develop secure and high-quality production code and review and debug code written by others


• Implement complex business logic in Python, Bash, PowerShell, and other scripting languages


• Engage effectively with third-party vendors in communicating and collaborating with a broad range of internal teams


• Minimize security vulnerabilities by following industry insights and government regulations to continuously evolve security protocols, including creating processes to determine the effectiveness of current controls


• Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability


• Formal training or certification on security engineering concepts and proficient applied experience


• Experience with cloud engineering, deployment engineering, DevOps engineering, or equivalent


• Specific experience deploying commercial software at scale into an enterprise environment


• Demonstrated skills in planning, designing, and implementing enterprise level security solutions


• Demonstrate strong working knowledge of Windows and Linux systems internals


• Strong experience defining and implementing infrastructure as Code (IaC), working with CI/CD pipelines, and associated automation tooling


• Commanding knowledge of a programming/scripting language for automation and integration tasks


• Proficiency in all aspects of the Software Development Life Cycle


• Proficient in cloud technologies (e.g., AWS security)


• Strong analytical experience with problem solving mindset and the ability to solve complex challenges


• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security

Preferred qualifications, capabilities, and skills

• Cloud computing related certifications with an AWS focus are strongly preferred (i.e., Certified Solutions Architect, DevOps Engineer, etc.) or similar

• Experience effectively communicating with senior business leaders

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives., Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.