Senior DevSecOps & Cloud Compliance Engineer

JPMorgan Chase & Co.; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

JPMorganChase, within the International Consumer Bank, seeks a Software Engineer III to join the Cloud Platform Engineering tribe. You will embed security into how we build and ship software in a regulated cloud‑native environment, crafting tooling and automation for continuous security visibility.

You will collaborate with platform engineers, product squads and risk teams to address vulnerabilities, enforce guardrails, and support audit activities while leveraging AI‑assisted development tools

Qualifications

• Formal training or certification in software engineering concepts.
• Hands‑on experience in a DevSecOps, cloud security, or compliance role.
• Experience with threat modelling methods applied to cloud services.
• Knowledge of Terraform and AWS security services.

Responsibilities

• Perform threat modelling of platform services and cloud infrastructure, translating findings into remediation guidance.
• Design and implement cloud security guardrails and policy-as-code controls.
• Build automation to detect, enrich, and report on security findings across AWS environments.
• Assess and track vulnerability findings; provide analysis for remediation prioritization.
• Contribute to software supply chain security practices and incident response activities.
• Support audit evidence collection and policy adherence with risk and governance teams.

Skills

Threat modelling

AWS security

Automation scripting

Kubernetes

Infrastructure as Code

AI-assisted development tools

Security governance

Education

Formal training or certification in software engineering

Tools

Terraform

Stay current with AWS security services

Python/Go/Bash scripting

Job description

JPMorganChase, within the International Consumer Bank, seeks a Software Engineer III to join the Cloud Platform Engineering tribe. You will embed security into how we build and ship software in a regulated cloud‑native environment, crafting tooling and automation for continuous security visibility.

You will collaborate with platform engineers, product squads and risk teams to address vulnerabilities, enforce guardrails, and support audit activities while leveraging AI‑assisted development tools