Security Engineer III: Vulnerability Scanning & Automation

JPMorganChase; Columbus (OH); On-site; USD 120,000 - 150,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer III to operate and evolve its global vulnerability scanning program across on-prem and cloud environments.

You will join the Cybersecurity & Technology Controls, Runtime Vulnerability Assessment team to ensure timely detection and risk-informed decisions. You will develop automation, manage scanner infrastructure, leverage AI capabilities with strict validation, and collaborate with infrastructure and cloud teams to maintain coverage, safety,

Qualifications

• 3+ years of applied security engineering experience.
• Experience designing and operating vulnerability scanning solutions at enterprise scale.
• Scripting and automation in Python, Bash, PowerShell.
• Experience using AI capabilities with validation and data handling.
• Ability to review AI-assisted code/security recommendations.
• Understand SDLC, IaC, and change controls.
• Knowledge of network fundamentals and segmentation.

Responsibilities

• Operate and maintain the firm’s global scanner fleet across data centers.
• Develop automation tooling for scanner lifecycle management.
• Use AI capabilities to accelerate security analysis and documentation.
• Assess detection coverage, correlate findings, and identify gaps.
• Collaborate with infra and cloud engineers for scan reachability.
• Maintain runbooks and continuity documentation.
• Analyze scan data to surface actionable risk insights.
• Support compliance scanning per regulatory standards.
• Apply AI-assisted practices in SDLC/toolchain for traceability.
• Champion infrastructure-as-code, version control, and change management.

Skills

Python

Bash

PowerShell

Automation

AI-assisted workflows

Infrastructure as Code

CI/CD

Security communications

Education

Security certification

Tools

Qualys

Tenable

Job description

JPMorgan Chase & Co. is seeking a Security Engineer III to operate and evolve its global vulnerability scanning program across on-prem and cloud environments.

You will join the Cybersecurity & Technology Controls, Runtime Vulnerability Assessment team to ensure timely detection and risk-informed decisions. You will develop automation, manage scanner infrastructure, leverage AI capabilities with strict validation, and collaborate with infrastructure and cloud teams to maintain coverage, safety,