Senior Security Engineer – Cloud, DevSecOps & AWS

JPMorgan Chase & Co.; Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Senior Security Engineer III in Seattle to join the Cybersecurity and Technology Controls line.

The role focuses on delivering secure software with tamper-proof, audit-defensible methods across multiple domains to prevent misuse and malicious behavior. You will design and implement security-centric software across the full SDLC, emphasize secure coding, and manage IaC for scalable cloud environments.

Qualifications

• 3+ years of applied security engineering experience.
• Experience building enterprise applications using Java.
• Experience with AWS or other public clouds.
• Experience using AI capabilities with validation habits.
• Ability to review AI-assisted code and data handling requirements.

Responsibilities

• Design, build, test, and maintain software across the SDLC in partnership with product, QA, and engineering teams.
• Follow secure coding standards, dependency and secret management, and vulnerability remediation.
• Develop and manage Infrastructure as Code (Terraform, CloudFormation, CDK) for scalable, secure environments.
• Build cloud-native solutions on AWS including security/IAM, networking, performance and scalability.
• Apply DevOps practices to improve developer productivity and reliability via CI/CD, automated testing, and incident management.
• Participate in on-call rotation and triage incidents, troubleshoot production issues, and drive root-cause analysis.

Skills

Java

AWS

Security engineering

CI/CD

AI capabilities

Python

Networking security

IT risk management

Incident analysis

Education

Security certification or training

Tools

Terraform

CloudFormation

CDK

Job description

JPMorgan Chase & Co. is seeking a Senior Security Engineer III in Seattle to join the Cybersecurity and Technology Controls line.

The role focuses on delivering secure software with tamper-proof, audit-defensible methods across multiple domains to prevent misuse and malicious behavior. You will design and implement security-centric software across the full SDLC, emphasize secure coding, and manage IaC for scalable cloud environments.