Software Engineer III - DevSecOps - Kubernetes Security

Job Description

At JPMorganChase, we build the technology that powers one of the world's most trusted financial institutions and we're looking for engineers who want to make a real impact. You'll join a collaborative, people-first team where curiosity, continuous learning, and technical excellence are part of everyday work. If you're passionate about security in containerised, Kubernetes, and cloud-native environments, this is your opportunity to grow your career while solving challenges that matter at scale.

As a Software Engineer III at JPMorganChase within the International Consumer Bank, you serve as a hands-on member of our Cloud Platform Engineering tribe in the Compliance Platform Engineering squad, which owns the security controls, compliance tooling, and guardrails underpinning the Chase UK cloud platform. Focused on Kubernetes security, you will build the tooling and automation that gives the business continuous visibility of its security posture, help design and enforce guardrails, and support teams in understanding and remediating their exposure.

Job responsibilities

• Help define and enforce Kubernetes security controls across our clusters - access controls, workload security standards, network policies and industry benchmarks

• Build and maintain automation to detect, enrich and report on security findings and compliance posture across our Kubernetes and cloud environments

• Help implement security guardrails and policy-as-code controls to enforce secure configuration at scale

• Assess and track vulnerability findings across Kubernetes clusters and workloads, providing context to help teams prioritise remediation

• Contribute to software supply chain security practices such as container image scanning, trusted registries, and dependency analysis

• Embed security guardrails into infrastructure-as-code and automated delivery pipelines so that policy is applied consistently and is easy to audit

• Use enterprise-authorised AI coding assist tools to improve code quality, delivery speed, and productivity, validating outputs through peer review, automated testing, and secure coding standards

Required qualifications, capabilities and skills

• Formal training or certification on software engineering concepts and proficient applied experience

• Working knowledge of a major cloud provider (AWS, GCP or Azure) and its core security services, such as audit logging, threat detection, vulnerability scanning and compliance posture management

• Hands-on experience securing Kubernetes and container orchestration in production, including access control, secrets management, workload security, network policies and hardening against benchmarks such as the CIS Kubernetes Benchmark