Sr Lead Security Engineer -Threat modelling

JPMorgan Chase; Wilmington (DE); On-site; USD 176,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Job summary

JPMorganChase in Wilmington, DE is seeking a Senior Lead Security Engineer specializing in threat modelling to help secure enterprise systems across cloud, hybrid, and on‑prem environments.

The role emphasizes hands‑on engineering, security by design, and collaboration with cross‑functional teams to embed robust controls and modern security practices.

Qualifications

• 5+ years of applied training or certification on software engineering concepts.
• Experience designing, deploying security solutions in public clouds (AWS, GCP, Azure).
• Ability to perform threat modeling and risk assessments using standard frameworks.
• Proficiency in at least one modern language (Python, C/C#, Go, Java).
• Knowledge of secure SDLC, code reviews, and vulnerability remediation.
• Experience with CI/CD pipelines and integrated security testing.
• Familiarity with Git, Jira, and modern DevOps tooling.
• Ability to work independently on complex design challenges.

Responsibilities

• Design, build, and implement advanced security solutions across cloud, hybrid, and on‑prem environments.
• Write code, develop automation, and integrate security controls in the SDLC.
• Clarify security requirements for networks to enable multi‑level security.
• Adopt emerging cybersecurity technologies to enhance security posture.
• Triages threats using risk assessments and manages resources to handle incidents.
• Embed security into product features and new releases.
• Mentor junior engineers via code reviews and knowledge sharing.
• Collaborate with product, infra, and business teams to implement security requirements.

Skills

Cloud security

Threat modelling

CI/CD security

Programming languages

Security tooling

Vulnerability remediation

Security reviews

Vendors security practices

AI-assisted security

Zero trust

Security automation

Education

None

Tools

Jenkins

GitHub Actions

Git

Bitbucket

Jira

Terraform

Ansible

Kubernetes

AWS Security Hub

Azure Sentinel

GCP Security Command Center

Job description

Sr Lead Security Engineer -Threat modelling

Wilmington, DE, United States

and 3 more

Job Information

• Job Identification 210751470
• Job Category Security Engineering
• Business Unit Corporate Sector
• Posting Date 09/24/2026, 01:19 PM
• Locations 880 Powder Mill Rd, Wilmington, DE, 19803, US1301 2nd Ave, Seattle, WA, 98101, US575 Washington Blvd, Jersey City, NJ, 07310, US1111 Polaris Pkwy, Columbus, OH, 43240, US
• Job Schedule Full time
• Job Shift Day
• Base Pay/Salary Jersey City,NJ $175,750.00-$260,000.00; Seattle,WA $175,750.00-$260,000.00

Job Description

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorgan Chase within Cybersecurity and Technology Controls, you are an integral part of an agile team that delivers secure, innovative software solutions. You will leverage your deep technical expertise and problem-solving skills to address a diverse array of cybersecurity challenges spanning multiple technology domains, driving significant business impact and shaping the organization’s security posture in a rapidly evolving threat landscape.

This is a hands‑on engineering role focused on technical execution, solution delivery, and direct contribution to security engineering projects. This is not a people management or administrative position.

Job Responsibilities

• Independently design, build, and implement advanced security solutions across cloud, hybrid, and on‑prem environments, ensuring alignment with the latest industry best practices and regulatory requirements.
• Actively write code, develop automation, and integrate security controls throughout the software development lifecycle, collaborating with engineering teams to embed security from ideation to deployment.
• Facilitate security requirements clarification for multiple networks to enable multi‑level security that satisfies organizational needs.
• Drive adoption and direct implementation of emerging cybersecurity technologies (e.g., zero trust architectures, container security, AI/ML‑driven security analytics) to enhance the organization’s security posture.
• Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events.
• Utilize a deep understanding of the threat landscape and risk to build security into products and new features.
• Mentor and provide technical guidance to junior engineers through code reviews and knowledge sharing, while remaining an individual contributor.
• Collaborate cross‑functionally with product, infrastructure, and business teams to ensure security requirements are understood, prioritized, and implemented effectively.
• Applies reuse‑first, AI‑assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
• Stay abreast of the latest cybersecurity trends, threat intelligence, and attack techniques, and translate insights into actionable improvements for the organization.
• Uses enterprise‑authorized AI capabilities within the work environment to accelerate security risk analysis and documentation (e.g., synthesizing threat assessments), validating outputs and ensuring sensitive data is handled appropriately.
• Develop and maintain incident response playbooks, and lead post‑incident reviews to drive continuous improvement from a technical perspective.

Required Qualifications, Capabilities, and Skills

• Obtain 5 plus years of applied training or certification on software engineering concepts
• Proven track record in hands‑on design, development, and deployment of enterprise‑grade security solutions in public cloud environments (AWS, GCP, Azure), with direct experience integrating security controls into cloud‑native architectures.
• Demonstrated ability to perform comprehensive threat modeling and risk assessments for applications, systems, and architectures using frameworks such as STRIDE, DREAD, or PASTA.
• Advanced proficiency in at least one modern programming language (e.g., Python, C/C#, Go, Java) and scripting for automation and security tooling, with a focus on building and deploying solutions.
• Deep understanding of secure software development practices, including code review, static/dynamic analysis, and vulnerability remediation across multiple technology domains (cloud, AI/ML, mobile, etc.).
• Experience implementing and managing CI/CD pipelines (e.g., Jenkins, GitHub Actions) with integrated security testing and controls.
• Expertise in version control systems (e.g., Git, BitBucket) and agile work management tools (e.g., Jira), with a focus on collaborative, cross‑functional engineering environments.
• Ability to independently solve complex design and functionality challenges, proactively identifying and mitigating security risks with minimal oversight.
• Experience working with vendors to assess the sufficiency of their security practices and controls to meet industry standards.
• Ability to review and validate AI‑assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Demonstrated experience using enterprise‑authorised AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.

Preferred Qualifications, Capabilities, and Skills

• Experience with modern security engineering practices, such as infrastructure as code (IaC), DevSecOps, and automated security testing.
• Hands‑on experience with cloud‑native security tools (e.g., AWS Security Hub, Azure Sentinel, GCP Security Command Center) and container orchestration platforms (e.g., Kubernetes).
• Active participation in the cybersecurity community, such as contributing to open‑source projects, attending or speaking at conferences, or publishing research.
• Experience implementing zero trust architectures, micro‑segmentation, or advanced identity and access management solutions.
• Strong understanding of privacy and data protection regulations (e.g., GDPR, CCPA) and their impact on security engineering.
• Experience within Cyber Security is preferred with a good understanding of industry frameworks like MITRE ATT&CK, NIST, CIS, etc.
• Relevant advanced certifications (e.g., CISSP, CCSP, AWS Certified Security Specialty, GIAC, OSCP) are highly desirable.
• Excellent communication and presentation skills, with the ability to convey complex security concepts to technical and non‑technical audiences.
• Experience with security automation and orchestration using tools like Terraform, Ansible, or custom scripting.
• Prior experience in highly regulated industries (finance, healthcare, etc.).
• Willingness to learn and drive to excel.

#CTC

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission‑based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on‑site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs (https://careers.jpmorgan.com/us/en/how-we-hire/faqs) for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About the Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.