Lead Cloud Security Engineer - DevSecOps & Threat Modeling

JPMorgan Chase; Plano (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

As a Lead Software Security Engineer at JPMorganChase, you will join an agile team to enhance, build, and deliver secure, scalable technology products. You will drive security across the SDLC and collaborate with senior stakeholders to mitigate risk.

You will design and implement cloud security architectures, automate security controls, and leverage AI-assisted threat modeling within a large-scale cloud environment. Strong coding in Java/Python/Go and Terraform is required.

Qualifications

• Formal training or certification in Security Engineering with 5+ years of hands-on experience.
• Advanced coding in Java or Python/Go with Terraform.
• Proficient in Networking, IaaC, Public Cloud architecture, and Cloud Security.
• Experience designing cloud architectures, CI/CD, resilience, and security in Agile SDLC.
• Extensive threat modeling, vulnerability testing, and pentesting.
• Experience with WAF technologies (AWS WAF, Akamai, Cloudflare, or similar).
• Experience using enterprise AI capabilities in security workflows with strong validation and data sensitivity awareness.

Responsibilities

• Clarify security requirements across multiple networks for multi-level security.
• Deploy and manage Cloud Network Security Platforms with DevOps security model.
• Lead cloud security implementations: end-to-end automation, architecture, monitoring, and transition to operations.
• Ensure compliance with firm policies and auditability; develop cloud-based security orchestration.
• Collaborate with technologists and leaders to triage risks and respond to disruptions.
• Apply reuse-first, AI-assisted practices to strengthen security testing and traceability.
• Use enterprise AI to accelerate threat modeling and security documentation, with data sensitivity considerations.

Skills

Security engineering concepts

Cloud security

Threat modeling

CI/CD pipelines

Education

Formal training or certification on Security Engineering

Tools

Terraform

AWS

Networking

EC2

Lambda

VPC

Route 53

APIs

Job description

As a Lead Software Security Engineer at JPMorganChase, you will join an agile team to enhance, build, and deliver secure, scalable technology products. You will drive security across the SDLC and collaborate with senior stakeholders to mitigate risk.

You will design and implement cloud security architectures, automate security controls, and leverage AI-assisted threat modeling within a large-scale cloud environment. Strong coding in Java/Python/Go and Terraform is required.