Senior Security Engineer (Java/Python) - Cloud & Security

JPMorgan Chase; Plano (TX); On-site; USD 157,000 - 215,000; Full time

Job summary

JPMorganChase is hiring a Lead Security Engineer to drive security engineering across Java and Python initiatives in cloud environments. You will own end-to-end production behavior, implement robust security controls, and mentor teams while applying AI-assisted practices for threat modeling and validation.

The role emphasizes scalable, resilient software in private and public clouds with strong emphasis on code quality, incident response, and auditability.

Qualifications

• 5+ years formal security engineering experience
• Experience designing and operating cloud-native systems in production
• Proficiency in Java and/or Python with maintainable code

Responsibilities

• Design and evolve distributed systems for reliability, scalability, security, and operability
• Contribute hands-on code in Java and Python, set design and readability standards
• Develop and maintain production services using Java Spring frameworks
• Review design proposals and code changes for correctness and maintainability
• Own production behavior including reliability, performance, incident response, and post-incident improvements
• Champion SDLC practices including testing, release hygiene, and rollback planning
• Ensure systems meet security, audit, and compliance expectations
• Mentor senior engineers and elevate team craftsmanship
• Apply AI-assisted practices in SDLC for security testing and validation

Skills

Java

Python

Cloud-native

Security engineering

Tools

DynamoDB

MongoDB

Job description

JPMorganChase is hiring a Lead Security Engineer to drive security engineering across Java and Python initiatives in cloud environments. You will own end-to-end production behavior, implement robust security controls, and mentor teams while applying AI-assisted practices for threat modeling and validation.

The role emphasizes scalable, resilient software in private and public clouds with strong emphasis on code quality, incident response, and auditability.