Lead Security Engineer - Infrastructure, HSM
JPMorgan Chase — Bengaluru, BENGALURU
Apply Now
Job Description
Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.
As a Lead Security Engineer at JPMorganChase within the Cybersecurity & Technology Controls team, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.
Job responsibilities
- Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements
- Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms
- Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
- Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations
- Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions
- Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards
- Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools
- Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments
- Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making
- Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.
- Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
Required qualifications, capabilities and skills
- Formal training or certification on security engineering concepts and 5+ years applied experience
- Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies
- Experience with network security, firewalls, and secure room operations and key ceremonies
- Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments
- Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
- Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments
- Hands-on experience with OpenSSL and certificate-based authentication mechanisms
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.
Preferred qualifications, capabilities and skills
- Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting
- Strong domain knowledge of payment processes and business resiliency applied to infrastructure design
- Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials
- Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations
Frequently Asked Questions
What are the eligibility criteria for the Lead Security Engineer - Infrastructure, HSM job at JPMorgan Chase?
Eligibility typically includes the qualifications and experience outlined in the job description above, with around 0-5 Years years of relevant experience expected for this role.
What are the primary responsibilities of a Lead Security Engineer - Infrastructure, HSM at JPMorgan Chase?
The key responsibilities for this role are detailed in the Key Responsibilities section above, covering the core duties expected of a Lead Security Engineer - Infrastructure, HSM at JPMorgan Chase.
Is prior experience required for this position?
This role requires around 0-5 Years years of relevant experience, as specified in the job listing. Please refer to the Qualifications & Experience section above for full details.
What skills are important for this role?
Skills relevant to this position are outlined in the Qualifications & Experience section above. In general, strong communication, domain knowledge, and the ability to meet role-specific targets are valued across similar BFSI positions.
How do I apply for the Lead Security Engineer - Infrastructure, HSM role at JPMorgan Chase?
You can apply directly using the Apply Now button on this page, which will take you to JPMorgan Chase's application process for this role.
Chat us
Call us