Security Engineer (Python/Bash) Vulnerability Assessments

JPMorgan Chase; Columbus (OH); On-site; USD 105,000 - 135,000; Full time

Job summary

JPMorganChase is seeking a Security Engineer III to operate and advance the firm's global vulnerability scanning program across on-prem and cloud. You will deploy, tune, and monitor scanner fleets, develop automation, and apply AI-enabled analysis to drive risk-informed decisions.

In this role, you will collaborate with infrastructure and cloud teams, build runbooks, and ensure audit-ready security practices across the SDLC while championing change management and IaC principles.

Qualifications

• Formal training or certification in security engineering concepts and 3+ years of applied experience.
• Experience designing and operating vulnerability scanning solutions at enterprise scale.
• Proficiency in scripting and automation using Python, Bash, PowerShell, etc.
• Experience using enterprise AI capabilities to support security workflows with validation.
• Ability to review AI-assisted code/security recommendations before use.
• Understanding of the software development lifecycle, IaC, and change controls.
• Knowledge of network segmentation, firewalls, and connectivity for scan reachability.
• Familiarity with agile methodologies and CI/CD in security engineering context.
• Ability to clearly communicate technical findings to stakeholders.

Responsibilities

• Operate and maintain global scanner fleet, including deployment and health monitoring.
• Develop automation tooling for scanner lifecycle management and integration with pipelines.
• Use AI capabilities to accelerate security analysis and ensure data handling is appropriate.
• Apply scanning platforms to assess coverage, correlate findings, and identify gaps.
• Collaborate with infra and cloud teams to ensure scan reachability across environments.
• Maintain runbooks, continuity docs, and coverage exercises for scanning operations.
• Analyze scan data to surface insights for enterprise risk prioritization and remediation.
• Support compliance scanning requirements and alignment with audit standards.
• Apply reuse-first, AI-assisted practices within SDLC/toolchain for traceability.
• Champion infrastructure-as-code, version control, and change management in the program.

Skills

Security concepts

Vulnerability scanning

Automation scripting

AI in security

AI-assisted validation

SDLC / IaC

Networking fundamentals

Agile / CI/CD

Communication of risks

Education

Formal training or certification in security engineering

Tools

Qualys

Tenable

Endpoint packaging

Job description

JPMorganChase is seeking a Security Engineer III to operate and advance the firm's global vulnerability scanning program across on-prem and cloud. You will deploy, tune, and monitor scanner fleets, develop automation, and apply AI-enabled analysis to drive risk-informed decisions.

In this role, you will collaborate with infrastructure and cloud teams, build runbooks, and ensure audit-ready security practices across the SDLC while championing change management and IaC principles.