Lead Security Engineer - Threat modelling, Cloud Security

Job Description

Join a high-performing team where your expertise in cybersecurity will make a direct impact. Advance your career by solving complex challenges across multiple technology domains.

As a Lead Security Engineer at JPMorgan Chase within the Cloud Foundational Services team, you play a pivotal role in delivering secure software solutions that meet functional and user requirements while preventing misuse and malicious behavior. You drive business impact through your technical capabilities and problem-solving skills, addressing diverse cybersecurity challenges. You are part of an agile team that values innovation and collaboration, contributing to a culture focused on excellence and growth.

Job responsibilities

• Facilitate security requirements clarification for multiple networks to enable multi-level security that satisfies organizational needs
• Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
• Triage based on risk assessments of various threats and manage resources to cover the impact of disruptive events
• Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
• Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.

Required qualifications, capabilities and skills

• Formal training or certification on security engineering concepts and 5+ years applied experience
• 10+ years cyber security hands-on experience
• Skilled in planning, designing, and implementing enterprise-level security solutions
• Advanced in one or more programming languages
• Advanced knowledge of platform security enablement and technical processes with considerable in-depth knowledge in one or more technical disciplines (e.g., AWS, Kubernetes, artificial intelligence, machine learning, etc.)
• Extensive experience with threat modeling and business risk articulation
• Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
• Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices
• Ability to tackle design and functionality problems independently with little to no oversight

Preferred qualifications, capabilities and skills

• Experience effectively communicating with senior business leaders