Lead Security Engineer - Python

JPMorgan Chase & Co.; Plano (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

JPMorganChase leads secure software engineering within the CTC, seeking a Lead Security Engineer to join a high-performing team delivering tamper-proof, audit-defensible solutions.

You will design, develop, and review secure Python APIs and microservices, apply AI-assisted security practices, and coordinate with stakeholders to harden defenses across cloud environments including AWS, GCP, and Azure.

Qualifications

• Design and build secure Python solutions using secure-by-design patterns.
• Perform secure coding, review, and debugging for Python and containerized workloads.
• Demonstrate expertise in cloud and DevOps technologies (AWS, GCP, Azure, Docker, Kubernetes, Jenkins, GitLab).
• Be skilled in working with databases such as MongoDB, PostgreSQL, and NoSQL.
• Maintain a strong background in data science and AI, including deep learning, NLP, GenAI, RAG concepts, prompt engineering, and data visualization.
• Apply experience in secure coding, model validation, and data privacy.
• Exhibit excellent problem-solving, communication, and teamwork skills.

Responsibilities

• Execute creative security solutions through design, development, and technical troubleshooting, thinking beyond routine or conventional approaches to build solutions and break down complex technical problems.
• Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Develop secure, high-quality production code, and review and debug code written by others.
• Minimize security vulnerabilities by applying industry insights and governmental regulations to continuously evolve security protocols; create processes to determine control effectiveness; and conduct discovery, vulnerability assessments, penetration testing, and threat scenario analysis to identify and assess vulnerabilities.
• Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability.
• Apply reuse-first, AI-assisted practices within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment to resiliency and security expectations.

Skills

Secure Python

Secure code review

Cloud & DevOps

Databases

Data science AI

Secure coding

Problem solving

Tools

Docker

Kubernetes

Jenkins

GitLab

AWS

GCP

Azure

Job description

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions.

As a Lead Security Engineer at JPMorganChase within the CTC, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job Responsibilities

• Execute creative security solutions through design, development, and technical troubleshooting, thinking beyond routine or conventional approaches to build solutions and break down complex technical problems.
• Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Develop secure, high-quality production code, and review and debug code written by others.
• Minimize security vulnerabilities by applying industry insights and governmental regulations to continuously evolve security protocols; create processes to determine control effectiveness; and conduct discovery, vulnerability assessments, penetration testing, and threat scenario analysis to identify and assess vulnerabilities.
• Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability.
• Apply reuse-first, AI-assisted practices within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment to resiliency and security expectations.

Required Qualifications, Capabilities, and Skills

• Design and build secure Python solutions (APIs, microservices, automation tools, security utilities) using secure-by-design patterns, least privilege, and defense-in-depth.
• Perform secure code development, review, and debugging for Python and adjacent stacks (e.g., containerized workloads, CI/CD), including fixing security defects and improving engineering guardrails.
• Demonstrate expertise in cloud and DevOps technologies, including AWS, Google Cloud, Azure, Docker, Kubernetes, Jenkins, and GitLab.
• Be skilled in working with databases such as MongoDB, PostgreSQL, and NoSQL systems.
• Maintain a strong background in data science and AI, including deep learning, NLP, GenAI, RAG concepts, prompt engineering, and data visualization.
• Apply experience in secure coding, model validation, and data privacy.
• Exhibit excellent problem-solving, communication, and teamwork skills.

Preferred Skills

• Experience with LLM fine-tuning, prompt engineering, and multi-modal AI integration.
• Familiarity with CI/CD pipelines and automation tools.
• Knowledge of frontend frameworks such as React and Next.js.
• Certifications in AI/ML, Kubernetes, AWS, or cybersecurity.
• Exposure to cybersecurity frameworks and compliance standards.

#CTC