Lead Python Security Engineer — Secure AI-Driven Apps

JPMorganChase; Plano (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

JPMorganChase is seeking a Lead Security Engineer to join the CTC and deliver secure software solutions. You will be a core technical contributor shaping security controls across APIs, microservices, and automation tooling.

The role emphasizes building secure production code, threat modeling, cloud expertise, and collaboration with stakeholders to reduce risk while maintaining development velocity.

Qualifications

• Experience designing secure software in production environments.
• Ability to translate security risks into actionable controls.
• Familiarity with AI-assisted security tooling.
• Experience with secure SDLC practices.
• Strong problem solving and collaboration abilities.

Responsibilities

• Execute creative security solutions through design, development, and technical troubleshooting.
• Use enterprise-authorized AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation.
• Develop secure, high-quality production code and review code by others.
• Minimize security vulnerabilities by applying industry insights and regulations; conduct discovery, vulnerability assessments, penetration testing, and threat analysis.
• Work with stakeholders to understand security needs and advise on business changes during vulnerabilities.
• Apply reuse-first, AI-assisted practices within SDLC to strengthen testing and control validation, ensuring traceability and auditability.

Skills

Secure Python development

Cloud & DevOps

Threat modeling

Security auditing

CI/CD security

Threat detection

Communication

Teamwork

Tools

Docker

Kubernetes

Jenkins

GitLab

AWS

Google Cloud

Azure

MongoDB

PostgreSQL

Job description

JPMorganChase is seeking a Lead Security Engineer to join the CTC and deliver secure software solutions. You will be a core technical contributor shaping security controls across APIs, microservices, and automation tooling.

The role emphasizes building secure production code, threat modeling, cloud expertise, and collaboration with stakeholders to reduce risk while maintaining development velocity.