Sr. Lead Security Engineer

JP Morgan; Ireland; On-site; EUR 140,000 - 200,000; Full time

Job summary

J.P. Morgan is seeking a Senior Lead Security Engineer within Enterprise Product Security in Ireland to drive secure software delivery across cloud and AI initiatives.

You will design and implement security controls, perform threat modelling, and guide SDLC practices, partnering with stakeholders to reduce risk while enabling innovative product development. You'll lead security engineering efforts across Google Cloud and related tooling, review AI-assisted recommendations, and mentor teams on

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity.
• Proven security engineering experience with cloud platforms.
• Knowledge of OWASP, NIST, ISO 27001.
• Strong SDLC security and secure coding practices.

Responsibilities

• Clarify security requirements for networks to enable multi-level security.
• Advise stakeholders and senior leaders on security modifications during vulnerabilities.
• Triage based on risk assessments, manage resources, implement corrective actions.
• Utilize enterprise AI capabilities to accelerate risk analysis and documentation.
• Apply AI-assisted practices within SDLC to strengthen testing and validation.
• Develop threat modelling frameworks and documentation.
• Communicate findings and risk mitigation to technical and executive audiences.

Skills

GCP Security

Threat Modelling

AI Security

SDLC Security

Python/Java

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Tools

GCP

AWS

Job description

Job Description Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers. As a Senior Lead Security Engineer at JPMorganChase within the Enterprise Product Security with expertise in Google Cloud, artificial intelligence (AI), application security, threat modelling and the software development lifecycle (SDLC), you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behaviour. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Facilitates security requirements clarification for multiple networks to enable multi-level security to satisfy organisational needs.
• Works with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability and serve as function-wide subject matter expert in one or more areas of focus.
• Be responsible for triaging based on risk assessments of various threats, manage resources to cover impact of disruptive events and implement corrective actions to prevent future occurrences.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate security risk analysis and documentation (e.g., synthesising threat assessments), validating outputs and ensuring sensitive data is handled appropriately.
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
• Develop and enhance threat modelling frameworks, processes, and documentation tailored to organizational needs.
• Communicate threat modelling findings and risk mitigation strategies to both technical and non-technical stakeholders, including executive leadership.

Required qualifications, capabilities, and skills

• Experience in security engineering or related field and a bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience with Google Cloud Platform (GCP) security services and tools and practical cloud native experience, in particular AWS.
• Experience with designing, building and running security solutions at scale and knowledge of security frameworks and standards (e.g., OWASP, NIST, ISO 27001).
• Strong understanding of application security principles and practices.
• Experience with the software development lifecycle (SDLC) and secure coding practices.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Skilled in planning, designing, and implementing enterprise-level security solutions.
• Advanced in one or more programming languages (e.g., Python, Java) and advanced knowledge of software application development and technical processes with considerable in-depth knowledge in one or more technical disciplines (e.g., cloud, artificial intelligence, machine learning, mobile, etc.).
• Extensive experience with threat modelling, discovery, vulnerability, and penetration testing.
• Strong analytical and problem-solving skills, the ability to work independently and as part of a team and excellent communication and collaboration abilities.

Preferred qualifications, capabilities, and skills

• Relevant certifications such as CISSP, CISM, CEH, or Google Cloud Professional Cloud Security Engineer are a plus.
• Experience with multiple cloud solutions.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About the Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.