Lead Security Engineer: Cloud, IaC & Secure DevOps

Testing Site - JPMC; Plano (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

JP Morgan Chase in the United States seeks a Lead Security Engineer to join the Cybersecurity & Technology Controls team, delivering secure software and preventing misuse. You will be a core technical contributor, implementing tamper-proof, audit-defensible methods across multiple domains within the organization.

Responsibilities include deploying software securely at scale, defining IaC with CI/CD pipelines, and collaborating with internal teams and vendors to uphold security and regulatory

Qualifications

• Formal training or certification in Engineering or Cybersecurity concepts with 5+ years of cloud/devops experience.
• Experience with cloud engineering, deployment engineering, DevOps engineering, or equivalent.
• Strong ability to plan, design, and implement enterprise security solutions.

Responsibilities

• Deploy and maintain software security solutions at scale in enterprise environments.
• Define and implement infrastructure as Code (IaC) and CI/CD pipelines with automation.
• Work with Windows and Linux systems internals and systems administration.
• Develop production deployments and robust security controls with auditability.
• Write secure production code and review others' code using Python, Bash, and PowerShell.
• Collaborate with vendors and internal teams to meet security needs.
• Evolve security protocols by following industry/regulatory guidance.
• Advise stakeholders on security requirements during vulnerabilities.

Skills

Cloud engineering

DevOps engineering

IaC

CI/CD pipelines

Python scripting

PowerShell

Linux/Windows internals

Security engineering

Agile methodologies

Terraform

Ansible

Git

Tools

Terraform

Ansible

Git

Job description

JP Morgan Chase in the United States seeks a Lead Security Engineer to join the Cybersecurity & Technology Controls team, delivering secure software and preventing misuse. You will be a core technical contributor, implementing tamper-proof, audit-defensible methods across multiple domains within the organization.

Responsibilities include deploying software securely at scale, defining IaC with CI/CD pipelines, and collaborating with internal teams and vendors to uphold security and regulatory