Senior Web Security Engineer - Offensive & Defensive

Testing Site - JPMC; Plano (TX); On-site; USD 110,000 - 145,000; Full time

Job summary

JPMorganChase is seeking a Security Engineer III in the United States (Plano, TX area) to join the Cybersecurity and Technology Controls line of business. You will help deliver software solutions while preventing misuse and ensuring audit defensible methods across multiple tech areas.

The role requires designing security solutions, analyzing threats, and maintaining secure baselines across platforms such as Apache, Tomcat, IIS, WebSphere, and Nginx.

Qualifications

• Formal training or certification on security engineering concepts and 3+ years applied experience.

Responsibilities

• Executes security solutions design, development, and troubleshooting for internal clients.
• Applies vulnerabilities analysis to assess threats and vulnerabilities.
• Leads continuity-related awareness, training, and exercises.
• Maintains security configuration baselines for web hosting and app servers.
• Coordinates with product engineering and stakeholders to implement secure baselines.
• Maps security controls to industry standards and coordinates changes.
• Collaborates with detection policy teams to ensure compliance.
• Provides remediation support for security findings.
• Supports team culture of diversity and inclusion.

Skills

Security engineering concepts

Coding proficiency

Software development life cycle

CI/CD and DevSecOps

Analytical problem solving

Tools

Vulnerability scanner

SIEM platforms

Web server / app server stacks

Job description

JPMorganChase is seeking a Security Engineer III in the United States (Plano, TX area) to join the Cybersecurity and Technology Controls line of business. You will help deliver software solutions while preventing misuse and ensuring audit defensible methods across multiple tech areas.

The role requires designing security solutions, analyzing threats, and maintaining secure baselines across platforms such as Apache, Tomcat, IIS, WebSphere, and Nginx.