Lead Security Engineer

We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible.

As a Lead Software Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. You will design, develop, test, and implement secure software components that protect the firm’s blockchain / distributed-ledger capabilities. As a core technical contributor, you are responsible for engineering critical technology solutions across multiple technical areas within various business functions in support of the firm’s business objectives. You will work within an engineering team, partnering closely with Architecture, Cybersecurity, Risk, and product/operations stakeholders in a hands-on environment with multiple, varied stakeholders.

Job responsibilities

• Design, develop, test, and deploy security monitoring controls, with a focus on block chain security

• Build and maintain modern tooling using API-first design, microservices and/or event-driven patterns, with strong non-functional focus (resilience, performance, scalability).

• Engineer and operate CI/CD pipelines with automated testing and security guardrails (code quality checks, dependency scanning, secrets scanning, policy gates).

• Define and execute secure SDLC practices including threat modeling, secure code review, vulnerability remediation, and secure configuration standards.

• Collaborate with cross-functional stakeholders to ensure timely, accurate integration of blockchain-related security telemetry and operational requirements.

• Provide technical leadership and mentorship through design reviews, code reviews, and engineering best-practice adoption across squads.

• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.

• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

• Support production reliability through operational readiness, incident triage/root cause analysis, and continuous improvement.

• Perform technical evaluation during proof-of-concept / vendor assessments, providing SME input into architecture and product decisions.

Required qualifications, capabilities, and skills

• Obtain 5 plus years of experience engineering a security analytics platform (Splunk or equivalent), within a large-scale or global enterprise, and a Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines

• Command of a programming/scripting language for automation and integration tasks.

• Expert understanding of data management concepts in the context of a security analytics platform, including; ingestion, parsing and normalization.

• Strong analytical and problem solving mindset with the ability to solve complex challenges.

• Experience working in an Agile team environment, working with at least one of the common Agile frameworks.

• General understanding of organizational Cybersecurity practices, risk management, security architecture, and engineering.

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.

• Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

• General understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity

#CTC