Senior Cloud Security Engineer – AI-Driven SecOps Lead

JPMorganChase; Plano (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorganChase, a leading financial institution, seeks a Lead Software Security Engineer to join an agile team delivering trusted technology products securely at scale. You will drive security across the SDLC, implement cloud security, automate security across platforms, and collaborate with stakeholders and senior leaders to minimize risk and enable secure innovation.

Ideal candidates have 5+ years of security engineering experience, deep coding in Java/Python, strong AWS and Terraform skills,

Qualifications

• Formal training or certification on Security Engineering concepts and 5+ years of applied experience.
• Advanced hands-on coding experience in java or Python/Go and Terraform. Expertise with AWS Infrastructure such as networking, EC2, Lambdas, server-less solutions, VPC, Route 53, autoscaling, Transit Gateway, API Gateway, Step Functions, secrets manager, and storage services.
• Proficient in core concepts for Networking, Infrastructure as Code (IaaC), Public Cloud architecture, and Cloud Security.
• Expertise in developing and designing complex cloud architectures, deploying scalable solutions, creating, and handling CI/CD pipelines, application resiliency, security design and implementation, and triaging issues in Agile Software Development Lifecycle methodology.
• Extensive experience with threat modeling, discovery, vulnerability, and penetration testing. Ability to tackle design and functionality problems independently with little to no oversight.
• Experience with WAF technologies such as AWS WAF, Akamai, Cloudflare, or similar.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Responsibilities

• Facilitate security requirements clarification for multiple networks to enable multi-level security, satisfying organizational needs for both ingress and egress traffic. Work at code-level using java/ Python and drive the maturity of the Cybersecurity software development lifecycle with an advanced understanding of line of business technology drivers.
• Perform deployment, administration, management, configuration, testing, documentation, operations, and integration tasks related to Cloud Network Security Platforms, championing a DevOps security model to ensure security is automated and elastic across all platforms.
• Lead and develop new Cloud Security Implementations for both ingress and egress traffic. Design and develop strategies to provide end-to-end automation, architecture design, performance and monitoring, best practices, proof of concepts, product design, and transition to operations.
• Collaborate with technologists, stakeholders, and senior business leaders to recommend business modifications during periods of vulnerability. Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events.
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Skills

Security engineering concepts

Java/Python coding

Terraform

AWS infrastructure

Cloud security design

CI/CD pipelines

Threat modeling

WAF technologies

Job description

JPMorganChase, a leading financial institution, seeks a Lead Software Security Engineer to join an agile team delivering trusted technology products securely at scale. You will drive security across the SDLC, implement cloud security, automate security across platforms, and collaborate with stakeholders and senior leaders to minimize risk and enable secure innovation.

Ideal candidates have 5+ years of security engineering experience, deep coding in Java/Python, strong AWS and Terraform skills,