Security Engineer III: Vulnerability Scanning & Automation

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

JPMorgan Chase & Co. in Columbus, OH, is seeking a Security Engineer III to operate and evolve the firm's global vulnerability scanning program across on‑premises data centers and cloud environments.

You will join the Runtime Vulnerability Assessment team to deliver scalable, audit-ready security tooling and to translate findings into enterprise risk decisions, with emphasis on automation, IaC, and cross‑functional collaboration.

Qualifications

• Formal training or certification on security engineering concepts and 3+ years applied experience.
• Experience designing and operating vulnerability scanning solutions at enterprise scale.
• Proficiency in scripting and automation using Python, Bash, PowerShell, or configuration management tools.
• Experience using enterprise AI capabilities to support security workflows with strong validation and data handling awareness.
• Understanding of SDLC, including infrastructure-as-code and change management controls.
• Knowledge of network segmentation, firewall rules, and scan reachability.

Responsibilities

• Operate and maintain the firm's global scanner fleet, including appliance deployment and health monitoring across multiple regions.
• Develop and maintain automation tooling for scanner lifecycle management and integration with deployment pipelines.
• Apply vulnerability scanning platforms to assess coverage, detect gaps, and correlate findings.
• Collaborate with infrastructure and cloud teams to ensure scan reachability in diverse environments.
• Maintain runbooks, continuity documentation, and coverage exercises for scanning under platform changes.
• Analyze scan data to surface actionable insights for risk prioritization and remediation.
• Support compliance scanning requirements and align with regulatory and audit standards.
• Promote reuse-first, AI-assisted practices within SDLC/toolchain for security testing and traceability.
• Champion infrastructure-as-code and change management within vulnerability programs.

Skills

Scripting/Automation

Security engineering

CI/CD & IaC

Communication

AI-assisted security

Network fundamentals

Agile methodologies

Problem solving

Education

Security certifications (e.g., CISSP, for example)

Tools

Qualys

Tenable

Job description

JPMorgan Chase & Co. in Columbus, OH, is seeking a Security Engineer III to operate and evolve the firm's global vulnerability scanning program across on‑premises data centers and cloud environments.

You will join the Runtime Vulnerability Assessment team to deliver scalable, audit-ready security tooling and to translate findings into enterprise risk decisions, with emphasis on automation, IaC, and cross‑functional collaboration.