Lead Security Engineer: Java/Python, Cloud-Native

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorganChase in Columbus, OH is seeking a Lead Security Engineer within the Cybersecurity and Technology Controls organization. You will drive design and delivery of secure, scalable software across private and public clouds, owning end-to-end reliability and security.

You will contribute code in Java and Python, mentor engineers, ensure audit‑defensible practices, incident management, and AI‑assisted security workflows across diverse services, and collaborate with teams to meet compliance.

Qualifications

• Formal training or certification on security engineering concepts and 5+ years applied experience.
• Experience designing and operating cloud-native systems in production environments.
• Strong proficiency in Java and/or Python with a proven track record of delivering high-quality, maintainable code.
• Experience designing and working with relational and NoSQL databases (e.g., DynamoDB, MongoDB) in production systems.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI‑assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Solid understanding of software engineering best practices including automated testing, continuous integration and delivery, and release management.
• Experience owning production systems including incident management, on‑call responsibilities, and post‑incident reviews.
• Excellent written and verbal communication skills, with the ability to clearly articulate technical decisions to both technical and non‑technical audiences.

Responsibilities

• Design and evolve distributed systems with a focus on reliability, scalability, security, and operability across private and public cloud environments.
• Contribute hands‑on code in Java and Python, setting the standard for design, readability, testability, and maintainability.
• Develop and maintain production‑ready services using Java Spring frameworks, ensuring performance and resilience at scale.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Identify and remediate architectural risks, technical debt, and systemic quality gaps before they impact production.
• Review design proposals and code changes for correctness, resilience, and long‑term maintainability.
• Own production behavior of systems end‑to‑end, including reliability, performance, incident response, and post‑incident improvements.
• Champion strong software development lifecycle practices including design reviews, testing strategy, release hygiene, and rollback planning.
• Ensure systems continuously meet security, audit, and compliance expectations as a core part of day‑to‑day engineering.
• Serve as a technical mentor and role model, elevating the craft of senior engineers across the team.
• Applies reuse-first, AI‑assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Skills

Security concepts

Cloud-native design

Java / Python

Databases (DynamoDB / MongoDB)

AI in security workflows

AI-assisted code review

CI/CD & release management

Incident management

Communication skills

Job description

JPMorganChase in Columbus, OH is seeking a Lead Security Engineer within the Cybersecurity and Technology Controls organization. You will drive design and delivery of secure, scalable software across private and public clouds, owning end-to-end reliability and security.

You will contribute code in Java and Python, mentor engineers, ensure audit‑defensible practices, incident management, and AI‑assisted security workflows across diverse services, and collaborate with teams to meet compliance.