Lead Security Engineer - Java & Python in the Cloud

JPMorganChase; Columbus (OH); On-site; USD 125,000 - 150,000; Full time

Job summary

JPMorganChase is seeking a seasoned engineer to design and run secure, scalable cloud-native services in production. You will code in Java and Python, review designs, and mentor engineers while ensuring compliance and remediation of risks.

The role leverages AI-assisted security capabilities integrated into the SDLC, with a focus on resilience and auditability. The position requires strong technical ownership, ability to communicate across technical and non-technical audiences, and a commitment

Qualifications

• Formal training or certification on security engineering concepts and 5+ years applied experience
• Demonstrated experience designing and operating cloud-native systems in production environments
• Strong proficiency in Java and/or Python with a proven track record of delivering high-quality, maintainable code
• Experience designing and working with relational and NoSQL databases (e.g., DynamoDB, MongoDB) in production systems.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Solid understanding of software engineering best practices including automated testing, continuous integration and delivery, and release management
• Experience owning production systems including incident management, on-call responsibilities, and post-incident reviews
• Excellent written and verbal communication skills, with the ability to clearly articulate technical decisions to both technical and non-technical audiences.

Responsibilities

• Design and evolve distributed systems with a focus on reliability, scalability, security, and operability across private and public cloud environments
• Contribute hands-on code in Java and Python, setting the standard for design, readability, testability, and maintainability
• Develop and maintain production-ready services using Java Spring frameworks, ensuring performance and resilience at scale
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Identify and remediate architectural risks, technical debt, and systemic quality gaps before they impact production
• Review design proposals and code changes for correctness, resilience, and long-term maintainability
• Own production behavior of systems end-to-end, including reliability, performance, incident response, and post-incident improvements
• Champion strong software development lifecycle practices including design reviews, testing strategy, release hygiene, and rollback planning
• Ensure systems continuously meet security, audit, and compliance expectations as a core part of day-to-day engineering
• Serve as a technical mentor and role model, elevating the craft of senior engineers across the team
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Skills

Java

Python

Cloud-native

Security engineering

Incident management

Code reviews

AI in SDLC

Tools

MongoDB

DynamoDB

Job description

JPMorganChase is seeking a seasoned engineer to design and run secure, scalable cloud-native services in production. You will code in Java and Python, review designs, and mentor engineers while ensuring compliance and remediation of risks.

The role leverages AI-assisted security capabilities integrated into the SDLC, with a focus on resilience and auditability. The position requires strong technical ownership, ability to communicate across technical and non-technical audiences, and a commitment