In a world where cybersecurity threats evolve daily, your skills have never mattered more. At JPMorganChase, you'll work alongside some of the brightest minds in security engineering, tackling complex challenges that protect millions of customers and the integrity of global financial systems. This is your opportunity to grow your career within a firm that invests in your development and values your contribution from day one.
As a Security Engineer II at JPMorganChase within Corporate Technology & Cybersecurity (CTC), part of Global Technology, you are part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As an emerging member of the security engineering team, you execute foundational software solutions through the design, development, and troubleshooting of multiple components within a technical area, while gaining the skills and experience to grow within your role. You will contribute to a team culture built on collaboration, continuous learning, and shared accountability — helping to safeguard one of the world's leading financial institutions.
Job responsibilities
- Execute standard security solutions in accordance with existing playbooks to satisfy security requirements for internal clients, including product, platform, and application owners
- Leverage enterprise-authorized AI capabilities to accelerate vulnerability analysis, synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately
- Write secure, high-quality code using the syntax of at least one programming language, with limited guidance, to support security engineering objectives
- Apply industry-standard tools to analyze and correlate incident data, identifying, interpreting, and summarizing the probability and impact of threats when determining specific vulnerabilities
- Contribute to the delivery of continuity-related awareness, training, educational activities, and exercises to strengthen organizational resilience
- Apply reuse-first, AI-assisted practices within software development lifecycle and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment to resiliency and security expectations
- Collaborate with cross-functional teams to support the identification and remediation of security risks across platforms and applications
Required qualifications, capabilities, and skills
- Formal training or certification on security engineering concepts and 2+ years applied experience
- Foundational experience developing security engineering solutions across design, development, and troubleshooting
- Working knowledge of leveraging enterprise-authorized AI capabilities to support security engineering workflows, with strong validation habits and awareness of data sensitivity
- Ability to review and validate AI-assisted code and security recommendations before use, escalating when uncertain and adhering to security and data handling requirements
- Demonstrable ability to code in one or more programming languages
- Experience across software development lifecycle execution, including agile methodologies such as continuous integration and continuous delivery, application resiliency, and security
- Working knowledge of information and network security, technology risk management, and architectural concepts and patterns
- Proficiency in using industry-standard tools to analyze incident data and support vulnerability assessment
Preferred qualifications, capabilities, and skills
- Experience with cloud security concepts and tools across one or more major cloud platforms such as AWS, Azure, or Google Cloud
- Familiarity with threat modeling frameworks such as STRIDE or MITRE ATT&CK
- Exposure to security automation or scripting to support vulnerability management workflows
- Understanding of regulatory and compliance frameworks relevant to financial services, such as NIST or ISO 27001
- Experience contributing to security documentation, runbooks, or playbook development within an agile team environment
#CTC