Lead Security Engineer: Secure Software & Threat Modeling

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 140,000 - 200,000; Full time

Job summary

JPMorgan Chase & Co. seeks a Lead Security Engineer to advance secure software solutions within Cybersecurity & Technology Controls.

You will be a core technical contributor applying tamper-proof, audit-defensible methods across multiple business functions, with emphasis on content creation and collaboration tools including Microsoft 365. You’ll lead threat modeling, secure code practices, and security controls governance while collaborating with senior stakeholders to align security with

Qualifications

• Experience designing and implementing enterprise security solutions.
• Ability to perform threat modeling for cloud and SaaS environments.
• Proficiency in secure production code development and code reviews.
• Strong knowledge of Microsoft 365 security products and features.
• Experience with SaaS security controls across cloud platforms.

Responsibilities

• Executes creative security solutions, design, development, and troubleshooting across multiple technical areas.
• Develops secure production code and reviews code written by others.
• Minimizes vulnerabilities by following industry best practices and regulatory requirements.
• Assesses security controls across collaboration platforms and mitigates gaps.
• Collaborates with stakeholders to translate security needs into business modifications during vulnerabilities.
• Performs threat modeling and security assessments for content creation and collaboration apps (e.g., Microsoft 365).
• Promotes a diverse and inclusive team culture.

Skills

Security architecture

Threat modeling

Secure coding

Microsoft 365 security

Cloud security

SDLC

CI/CD security

Leadership communication

Security controls

Risk assessment

Tools

Microsoft Defender

Purview

Data Loss Prevention (DLP)

Entra ID

SharePoint

Teams

OneDrive

Job description

JPMorgan Chase & Co. seeks a Lead Security Engineer to advance secure software solutions within Cybersecurity & Technology Controls.

You will be a core technical contributor applying tamper-proof, audit-defensible methods across multiple business functions, with emphasis on content creation and collaboration tools including Microsoft 365. You’ll lead threat modeling, secure code practices, and security controls governance while collaborating with senior stakeholders to align security with