Security Engineer III

JPMorgan Chase & Co.; Fairfax (DE); On-site; USD 120,000 - 180,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer III within the Cybersecurity Technology & Controls to help deliver secure software, preventing misuse and malicious behavior.

You will design and implement secure production code, improve CI/CD pipelines, leverage enterprise AI capabilities, and ensure auditability and data protection across multiple business functions to support global objectives.

Qualifications

• Formal training or certification on security engineering concepts with application knowledge.
• 3+ years of applied experience in security engineering.
• Experience developing security engineering solutions.
• Ability to review and validate AI-assisted code/security recommendations.

Responsibilities

• Executes security solutions design, development, and technical troubleshooting for internal clients.
• Creates secure, high-quality production code and maintains algorithms.
• Optimize latency/cost; handle load, caching, concurrency, and data growth.
• Uses enterprise AI capabilities to accelerate security analysis and vulnerability assessment.
• Leads delivery of continuity-related awareness, training, and exercises.
• Improves CI/CD pipelines and strengthens security testing and audits.

Skills

Security engineering

Java

Golang

SDLC

CI/CD

Job description

Your seniority as a security engineer puts you in the ranks of the top talent in your field. Play a critical role at one of the world's most iconic financial institutions where security is vital.

As a Security Engineer III at JPMorgan Chase within the Cybersecurity Technology & Controls, you serve as a seasoned member of a team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Carry out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions in support of the firm’s business objectives.

Job responsibilities

• Executes security solutions design, development, and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security requirements for internal clients (e.g., product, platform, application owners)
• Creates secure and high-quality production code and maintains algorithms that run synchronously with appropriate systems
• Optimize latency/cost; handle load, caching, concurrency, and data growth.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Leads delivery of continuity-related awareness, training, educational activities, andexercises
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
• Refactor, pay down tech debt, improve CI/CD pipelines, contribute to engineering best practices.

Required qualifications, capabilities, and skills

• Formal training or certification on security engineering concepts with application knowledge and 3+ years of applied experience
• Must have experience in coding (Java, Golang), overall knowledge of Software Development Life Cycle.
• Experience developing security engineering solutions
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.
• Solid understanding of agile methodologies such as CI/CD, application resiliency, and security
• Demonstrated ability to handle moderately ambiguous requirements and own features through delivery.

Preferred qualifications, capabilities, and skills

• Experience with streaming/async workloads, or distributed systems patterns (idempotency, eventual consistency).
• Hands-on experience implementing LLM-powered agents or copilots in production or advanced prototypes.