Lead Security Engineer - Application Security

JPMorgan Chase & Co.; Dublin; On-site; EUR 140,000 - 200,000; Full time

Job summary

JPMorganChase is seeking a Lead Security Engineer to design, develop, and deliver enterprise-grade security solutions that protect critical financial functions across multiple domains. You will partner with stakeholders and senior leaders to align security capabilities with evolving business needs, while applying AWS, CI/CD security practices, and AI-assisted development tools.

The role emphasizes secure coding, continuous improvement, and rigorous threat mitigation in a global, high-scale

Qualifications

• Demonstrated ability to design and implement enterprise security across complex environments.
• Strong Python coding with emphasis on secure practices and SDLC integration.
• Experience communicating risks and trade-offs to senior leaders.
• Hands-on AWS and Terraform experience; familiar with CI/CD tooling.
• Understanding of AI-assisted development tools and responsible AI use.

Responsibilities

• Design and deliver enterprise-grade security solutions across multi-domain environments.
• Develop secure production code and perform thorough reviews to remediate vulnerabilities.
• Continuously monitor industry and regulatory guidance to evolve security controls.
• Collaborate with stakeholders to align security requirements with business needs.
• Architect and maintain auditable, tamper-proof security methods across domains.
• Leverage AWS services and Terraform for scalable, secure infrastructure.
• Apply AI-assisted development tools with emphasis on correctness, security, and performance.

Skills

Enterprise security design

Python security

SDLC security

CI/CD security

Senior stakeholder communication

AWS security services

Terraform

AI-assisted development tools

Responsible AI

Tools

Jenkins

GitHub

Spinnaker

Terraform

CloudWatch

S3

IAM

AWS Lambda

EventBridge

Job description

Join a world-class security engineering team where your expertise directly protects one of the most complex financial institutions in the world. At JPMorganChase, security engineers are empowered to think boldly, solve hard problems, and build solutions that matter — at a scale few organizations can offer. You will work alongside talented technologists and business leaders who are committed to staying ahead of evolving threats, and you will have access to the tools, resources, and support to grow your career in meaningful ways. This is your opportunity to make a lasting impact on the security posture of a global firm.

As a Lead Security Engineer at JPMorganChase within the Security Engineering team, you will serve as a core technical contributor responsible for designing, developing, and delivering high-quality security solutions that protect critical business functions. You will bring deep technical expertise and creative problem-solving to address complex security challenges across multiple technology domains. Your work will directly influence how the firm identifies, mitigates, and responds to security vulnerabilities — ensuring our systems remain resilient, compliant, and defensible. You will collaborate closely with stakeholders and senior business leaders to align security capabilities with evolving business needs.

Job Responsibilities

• Design and implement creative, enterprise-grade security solutions that go beyond conventional approaches to address complex technical and threat-based challenges
• Develop secure, high-quality production code and conduct thorough code reviews to identify and remediate vulnerabilities introduced by others
• Minimize security risk by continuously monitoring industry insights and regulatory guidance to evolve security protocols and assess the effectiveness of existing controls
• Partner with stakeholders and business leaders to understand security requirements and recommend strategic modifications during periods of elevated vulnerability or risk
• Architect and maintain tamper-proof, audit-defensible methods across multiple technical areas and business functions
• Leverage cloud-native services and infrastructure-as-code practices to build scalable, secure, and observable solutions in AWS environments
• Apply enterprise-authorized AI-assisted development tools to accelerate engineering workflows, while critically validating outputs for correctness, security, and performance

Required qualifications, capabilities, and skills

• Demonstrated ability to plan, design, and implement enterprise-level security solutions across complex, multi-domain environments
• Advanced proficiency in Python with a strong focus on security best practices and secure coding standards
• Proficiency across all phases of the Software Development Life Cycle, with an understanding of how security integrates at each stage
• Advanced understanding of agile methodologies and continuous integration and delivery practices, including tools such as Jenkins, GitHub, and Spinnaker, as well as application resiliency and security principles
• Proven ability to communicate effectively with senior business leaders on security risks, recommendations, and technical trade-offs
• Hands‑on experience with AWS cloud services — including Elastic Container Service, Elastic Compute Cloud, Lambda, EventBridge, S3, Identity and Access Management, CloudWatch, and Secrets Manager — as well as Terraform for infrastructure provisioning
• Hands‑on experience using enterprise‑authorized AI‑assisted software development tools within the work environment (e.g., for coding, test creation, troubleshooting, or documentation) with demonstrated ability to critically evaluate, validate, and refine AI-generated outputs for correctness, performance, and security
• Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs and outputs, and adherence to resiliency and security expectations; ability to guide peers on safe and effective usage within team practices

Preferred qualifications, capabilities, and skills

• Familiarity with machine learning methodologies and model training concepts as applied to security use cases
• Experience with AWS Aurora PostgreSQL or other SQL relational database platforms
• Exposure to observability and monitoring tooling such as Dynatrace, Grafana, or Splunk
• Working knowledge of Go or Java programming languages
• Experience with automated functional and integration testing frameworks