Sr Manager of Security Engineering- Backend Java

Testing Site - JPMC; Columbus (OH); On-site; USD 180,000 - 260,000; Full time

Job summary

JPMorganChase in Columbus, OH seeks a Senior Manager of Security Engineering to lead a team of security engineers, provide technical coaching, and align security initiatives with business needs. You will influence budgets and drive enterprise-wide tooling and automation.

This leadership role requires IAM expertise, secure software development experience, and hands-on coding in Java/Python/Node.js, plus strong threat modeling and CI/CD knowledge to advance security capabilities across the firm.

Qualifications

• Formal training or certification on security concepts and 5+ years of applied experience in software engineering.
• Ability to plan, design, and implement enterprise-level security solutions.
• Experience building internal tools and workflow automation.
• Expertise in IAM technologies and production-quality code in major languages.

Responsibilities

• Provides direction, oversight, and coaching for security engineers.
• Influences budget, resources, and execution of security processes.
• Ensures successful collaboration across teams and stakeholders.
• Identifies issues and escalates as needed to execute the book of work.
• Offers input on budget and technical approaches to improve efficiency.
• Fosters diversity, opportunity, inclusion, and respectful culture.

Skills

Security engineering leadership

Internal tools development

Workflow automation

IAM technologies (OAuth2.0, SAML, ABAC

RBAC, PBAC, OPA

Java/Python/Node.js

CI/CD and Agile methodologies

Threat modeling & pentesting

Education

Formal training or security certification

Tools

Grafana

Splunk

Prometheus

AD attack-path analysis tools

Job description

Step up as a tech leader and innovator with your knowledge and mentorship of security engineers. Lead teams to excellence in this high-impact role.

As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology and Controls, you serve in a leadership role by providing technical coaching and advisory for multiple technical teams, as well as anticipate the needs and potential dependencies of other functions within the firm. As an expert in your field, your insights influence budget and technical considerations to advance operational efficiencies and functionalities.

Job responsibilities

• Provides overall direction, oversight, and coaching for a team of entry-level to mid-level security engineers that work on basic to moderately complex tasks


• Be accountable for decisions that influence teams’ resources, budget, tactical operations and the execution and implementation of processes and procedures


• Ensures successful collaboration across teams and stakeholders


• Identifies and mitigates issues to execute a book of work while escalating issues as necessary


• Provides input to leadership regarding budget, approach, and technical considerations to improve operational efficiencies and functionality for the team


• Creates a culture of diversity, opportunity, inclusion, and respect for team members, and prioritizes diverse representation

ReqRequired qualifications, capabilities, and skills

• Formal training or certification on security concepts and 5+ years of applied experience in software engineering or software development, including experience building internal tools or workflow automation


• Skilled in planning, designing, and implementing enterprise-level solutions


• Experience building internal tools, workflow automation, or pipeline management systems


• Expertise in IAM technologies: OAuth2.0, SAML, ABAC, RBAC, PBAC, OPA.


• Advanced proficiency in Java, Python, or Node.js—production-quality code


• Advanced understanding of agile methodologies, CI/CD, Application Resiliency, Security, Service Ownership


• Extensive experience with threat modeling, discovery, vulnerability, and penetration testing

Preferred qualifications, capabilities, and skills

• Experience with dashboard and reporting tools: Grafana, Splunk, Prometheus, custom dashboards.


• Experience with hybrid identity environments: Azure AD/Entra ID Connect, AWS Cognito, OIDC Federation


• Familiarity with regulated industry environments (financial services, healthcare, government)


• Experience with BloodHound, SharpHound, or equivalent AD attack path analysis tools

#CTC