Red Team Security Engineer

JPMorgan Chase & Co.; Plano (TX); On-site; USD 61,000 - 101,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer within Cybersecurity & Technology Controls for AI/ML to design secure AI architectures and strengthen red teaming programs.

You will work across product, data science, cyber, legal, and risk teams to assess AI use cases, build internal tools, dashboards, and automation for red teaming efforts. You will apply threat modeling, penetration testing, and adversarial testing practices to complex AI systems, including RAG pipelines and ML workloads,

Qualifications

• We seek formal training or certification in public cloud concepts and hands-on cloud experience.
• Experience with threat modeling, vulnerability testing, and adversarial testing for AI/ML systems.
• Proficiency in Python scripting and building security tooling for red teaming.
• Familiarity with MITRE ATLAS, OWASP Top 10 for LLMs, IAM, OIDC, and SAML is preferred.

Responsibilities

• We develop and strengthen security strategies, red teaming programs, and scalable solutions.
• We design secure AI and software architectures, review designs and code for adversarial resilience.
• We reduce AI/LLM security risks by applying standards and evolving controls.
• Partner with product, data science, cyber, legal, and risk teams to assess AI use cases and risk.

Skills

Python scripting

Cloud concepts

Threat modeling

Adversarial testing

AI/ML concepts

Education

Formal training or certification in public cloud concepts

Tools

Terraform

CloudFormation

PyRIT

Garak

LLM evaluation harnesses

Job description

Salary: $61,000 - 101,000 per year

Requirements:

• We look for formal training or certification in public cloud concepts, along with advanced hands-on experience using cloud-native AI services such as Bedrock.
• We require experience in threat modeling, discovery, vulnerability testing, and penetration testing, including familiarity with MITRE ATLAS, OWASP Top 10 for LLMs, and core cybersecurity topics such as IAM, authentication, OIDC, and SAML.
• We expect practical experience with Infrastructure as Code tools such as Terraform and CloudFormation.
• We need proficiency in Python scripting.
• We value a strong understanding of AI/ML concepts and current trends, including foundational AI red teaming knowledge for designing and delivering exercises across complex AI architectures.
• We look for the ability to design, validate, and clearly communicate technical solutions to enterprise security challenges, including building internal tools, dashboards, and automation for red teaming work.
• Preferred: experience planning, designing, and implementing AI red teaming exercises and enterprise-scale security solutions for generative AI, LLMs, and ML systems.
• Preferred: experience with AI security and red teaming tools and frameworks such as PyRIT, Garak, and custom LLM evaluation harnesses, as well as contributions to AI security or open-source security projects.

Responsibilities:

• We develop and strengthen security strategies, red teaming programs, and solution designs while troubleshooting technical issues and building scalable solutions.
• We design secure, high-quality AI and software architectures, reviewing and challenging designs and code to improve adversarial resilience.
• We reduce AI and LLM security risks by applying industry standards and emerging AI safety research, and by evolving policies, testing approaches, and controls.
• We partner with stakeholders across product, data science, cyber, legal, and risk to understand AI use cases and recommend changes during periods of elevated risk or regulatory change.
• We perform discovery, threat modeling, and adversarial testing on generative AI, RAG pipelines, and ML systems to uncover issues such as prompt injection, jailbreaking, and data poisoning.
• We provide guidance on secure design, logging, monitoring, and compensating controls for AI applications and platforms.
• We define and implement AI red teaming methods, playbooks, and success measures, creating mechanisms for continuous testing and safe release of new AI models and features.
• We work with platform and cloud security teams to confirm secure infrastructure configuration and alignment with enterprise security architecture.
• We engage with external researchers, vendors, and standards bodies to monitor emerging AI threats and incorporate best practices into our organization.
• We foster a culture of diversity, opportunity, inclusion, and respect within the team.
• We collaborate across functions to build relationships, influence senior stakeholders, and align on AI risk tolerance and mitigation priorities.

Technologies:

• AI
• Cloud
• IAM
• Support
• LLM
• Marketing
• OWASP
• Python
• RAG
• SAML
• Security
• Terraform

More:

We are collaborating with hackajob to connect exceptional professionals with J.P. Morgan for this role. As a Security Engineer within Cybersecurity & Technology Controls for AI/ML, you will join a high-performing team delivering secure software solutions and helping shape the future of software security at one of the worlds largest and most influential companies. JPMorganChase is one of the oldest financial institutions, providing innovative financial solutions to consumers, small businesses, and prominent corporate, institutional, and government clients under the J.P. Morgan and Chase brands. With more than 200 years of history, we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management. We offer a competitive total rewards package, and eligible roles may include commission or discretionary incentive compensation. Our benefits include comprehensive health care, wellness centers, retirement savings, backup childcare, tuition reimbursement, mental health support, financial coaching, and more. We are committed to diversity and inclusion, equal opportunity, and reasonable accommodations. This role sits within our Corporate Functions team, where professionals support finance, risk, human resources, marketing, and other critical areas that help set our businesses, clients, customers, and employees up for success.

last updated 40 week of 2026