Vista previa de la oferta
Lead Security Engineer - Threat modelling, Cloud Security
lead · Technology / Software Development
Join a high-performing team where your expertise in cybersecurity will make a direct impact. Advance your career by solving complex challenges across multiple technology domains.
As a Lead Security Engineer at JPMorgan Chase within the Cloud Foundational Services team, you play a pivotal role in delivering secure software solutions that meet functional and user requirements while preventing misuse and malicious behavior. You drive business impact through your technical capabilities and problem-solving skills, addressing diverse cybersecurity challenges. You are part of an agile team that values innovation and collaboration, contributing to a culture focused on excellence and growth.
Job responsibilities
- Facilitate security requirements clarification for multiple networks to enable multi-level security that satisfies organizational needs
- Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
- Triage based on risk assessments of various threats and manage resources to cover the impact of disruptive events
- Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
- Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
Required qualifications, capabilities and skills
- Formal training or certification on security engineering concepts and 5+ years applied experience
- 10+ years cyber security hands-on experience
- Skilled in planning, designing, and implementing enterprise-level security solutions
- Advanced in one or more programming languages
- Advanced knowledge of platform security enablement and technical processes with considerable in-depth knowledge in one or more technical disciplines (e.g., AWS, Kubernetes, artificial intelligence, machine learning, etc.)
- Extensive experience with threat modeling and business risk articulation
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices
- Ability to tackle design and functionality problems independently with little to no oversight
Preferred qualifications, capabilities and skills
- Experience effectively communicating with senior business leaders