Lead Security Engineer - Red Team

JPMorgan Chase & Co.; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. in Plano, TX seeks a Security Engineer to join the Cybersecurity & Technology Controls for AI/ML. You will deliver secure software solutions, build tamper-evident controls, and help shape enterprise AI risk management.

You will design secure AI/ML architectures, perform threat modeling and adversarial testing, and collaborate with product, data science, and risk teams.

Qualifications

• Formal training or certification in Public Cloud environment concepts and hands-on experience with cloud-native AI services.
• Experience with threat modeling, discovery, vulnerability, and penetration testing and foundational cybersecurity concepts such as IAM, Authentication, OIDC, SAML.
• Terraform and CloudFormation as IaC tools.
• Proficiency in Python scripting.
• Solid understanding of AI/ML concepts and AI red teaming foundations.
• Ability to design, validate, and communicate secure technical solutions including internal tools and dashboards.

Responsibilities

• Develop and enhance security strategies and red teaming programs for AI/ML solutions.
• Design secure AI/ML architectures and review designs and code for adversarial resilience.
• Reduce AI security vulnerabilities by following industry standards and AI safety research.
• Collaborate with product, data science, cyber, legal, and risk teams to align AI use cases with risk tolerance.
• Conduct threat modeling, discovery, and adversarial testing on generative AI and ML systems.
• Provide guidance on secure design, logging, monitoring, and controls for AI platforms.
• Define AI red teaming playbooks and metrics for safe rollout of models and features.
• Work with platform and cloud security to ensure secure infrastructure.
• Engage with external researchers and standards bodies to track AI threats.
• Foster an inclusive team culture and cross-functional collaboration.
• Drive alignment on AI risk mitigation priorities.

Skills

Public Cloud

Threat Modeling

IAM & SAML

IaC Terraform/CF

Python

Automation & Dashboards

Job description

Description

Take on a crucial role whereyou'llbe a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.As a Security Engineer at JPMorgan Chase within the Cybersecurity & Technology Controls for AI/ML, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and maliciousbehavior. As a core technical contributor, youare responsible forcarrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job Responsibilities

• Develop and enhance security strategies, red teaming programs, and solution designs, while troubleshooting technical issues and creating scalable solutions.
• Design secure, high-quality AI and software architectures, reviewing and challenging designs and code to ensure adversarial resilience.
• Reduce AI and LLM security vulnerabilities by adhering to industry standards and emerging AI safety research, evolving policies, testing protocols, and controls.
• Collaborate with stakeholders across product, data science, cyber, legal, and risk to understand AI use cases and recommend modifications during periods of heightened vulnerability or regulatory change.
• Conduct discovery, threat modeling, and adversarial testing on generative AI, RAG pipelines, and ML systems to identify vulnerabilities such as prompt injection, jailbreaking, and data poisoning.
• Provide guidance on secure design, logging, monitoring, and compensating controls for AI applications and platforms.
• Define and implement AI red teaming methodologies, playbooks, and success metrics, establishing mechanisms for continuous testing and safe rollout of new AI models and features.
• Work with platform and cloud security teams to ensure secure infrastructure configuration and alignment with enterprise security architecture.
• Engage with external researchers, vendors, and standards bodies to track emerging AI threats and bring best practices into the organization.
• Foster a team culture of diversity, opportunity, inclusion, and respect.
• Collaborate within a cross-functional team to develop relationships, influence senior stakeholders, and drive alignment on AI risk tolerance and mitigation priorities.

Required Qualifications, Capabilities, and Skills

• Formal training or certification in Public Cloud environment concepts and advanced hands-on experience with cloud-native AI services (e.g., Bedrock).
• Experience with threat modeling, discovery, vulnerability, and penetration testing (e.g., MITRE ATLAS, OWASP Top 10 for LLMs) and foundational cybersecurity concepts such as IAM, Authentication, OIDC, SAML.
• Practical experience with Infrastructure as Code (IaC) solutions like Terraform and CloudFormation.
• Proficiency in Python scripting.
• Strong understanding of AI/ML concepts and trends, with knowledge of AI red teaming foundational concepts to design and implement exercises for complex AI architectures.
• Ability to conceptualize, design, validate, and communicate creative technical solutions to enterprise-level security problems, including building internal tools, dashboards, and automation for red teaming activities.

Preferred Qualifications, Capabilities, and Skills

• Expertise in planning, designing, and implementing AI red teaming exercises and enterprise-level security solutions for generative AI, LLMs, and ML systems.
• Experience with specialized AI security/red teaming tools and frameworks (e.g., PyRIT, Garak, custom LLM evaluation harnesses) and contributions to AI security or open-source security projects.

#CTC