Lead Security Engineer

J.P. Morgan; New York (NY); On-site; USD 215,000 - 260,000; Full time

Job summary

A leading financial services company seeks a Security Engineer to provide robust security solutions, manage federal compliance, and enhance security practices across their platforms. Ideal candidates have at least 5 years of experience in security roles, with a strong grasp of Kubernetes, DevOps tools, and cloud security regulations. This full-time position is located in New York, offering a competitive salary range.

Qualifications

• 5 years of experience in security engineering or related fields.
• Experience with Kubernetes and modern DevOps tools essential.
• Deep understanding of cloud security standards like SOC2, PCI.

Responsibilities

• Provide security solutions across core platform domains.
• Develop security enablement services used in SDLC.
• Implement firm wide federal controls and regulations.

Skills

Kubernetes

DevOps tools

OWASP

Threat Modeling

Golang

Java

Python

Bash

GitHub actions

Jenkins

Docker security

Cloud security

Education

Bachelor's degree in Engineering, Computer Science, or related field

Master's degree in Engineering, Computer Science, or related field

Job description

Duties: Provide security solutions across a number of domains in the core platform, including our Kubernetes platform and ecosystem, CI/CD tooling. Develop and take ownership of security enablement services used in our SDLC whether that's services written in Golang, Java, Python or OSS tools. Engage and collaborate with engineers across the business to understand use-cases and to define best practices for use of the security of the platform. Bring in the new and latest technologies and techniques for security and identity while driving their adoption where appropriate. Own and implement firm wide federal controls and regulations.

QUALIFICATIONS:

Minimum education and experience required: Bachelor's degree in Engineering (any), Computer Science, Computer Information Systems, or related field of study plus 5 years of experience in the job offered or as Lead Security Engineer, Devops Engineer, Application Developer, Java Technical Lead, or related occupation. The employer will alternatively accept a Master's degree in Engineering (any), Computer Science, Computer Information Systems, or related field of study plus 3 years of experience in the job offered or as Lead Security Engineer, Devops Engineer, Application Developer, Java Technical Lead, or related occupation.

Skills Required: This position requires any amount of experience with the following: Using modern devops tools including GitHub, Helm, and custom resource definitions to deploy services in Kubernetes environments while following security standards; Applying OWASP security vulnerability mitigation in a cloud environment; Monitoring and applying cloud and container security; Performing Threat Modeling to identify and mitigate risks; Software development using golang, Java, Python, and Bash; Using GitHub actions and Jenkins to securely deploy software and infrastructure; Hardening the security of docker images; Implementing and managing logging across distributed environments; Managing and monitoring of Kubernetes environments to ensure site reliability and security; Actively monitoring and managing cloud environments for vulnerabilities; Deploying infrastructure to GCP and AWS through infrastructure as code; Modeling and implementing cloud networks using VPCs and subnets to ensure network security and isolation; Secure software design in a regulatory space such as SOC2, PCI or FIPS.

Job Location: 237 Park Avenue, New York, NY 10017

Full-Time. Salary: $215,000 - $260,000 per year.

About the company

J.P. Morgan is a leader in financial services, offering solutions to clients in more than 100 countries with one of the most comprehensive global product platforms available. We have been helping our clients to do business and manage their wealth for more than 200 years. Our business has been built upon our core principle of putting our clients' interests first.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at [e-mail] or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report . NYC applicants may request an alternative process or accommodation at [e-mail] or 407-000-0000.