Lead Security Engineer

Responsibilities

• Design, build, and operate scalable security capabilities integrated into engineering workflows
• Embed security into the software development lifecycle by implementing automated controls
• Improve software supply chain security through SBOM generation and dependency visibility
• Analyze and enrich vulnerability data with contextual information for effective remediation
• Provide actionable insights and guidance to engineering teams to address security issues
• Collaborate with platform and product engineering teams to drive secure development practices
• Identify and assess security risks in runtime and cloud environments
• Support the development and operation of runtime security tooling for production risk visibility
• Contribute to security incident response activities, including triage and investigation
• Develop and maintain incident response processes, runbooks, and detection capabilities
• Drive adoption and governance of approved AI-assisted engineering practices across teams

Requirements

• Hands-on experience in software, platform, or cloud engineering roles in public cloud environments
• Strong ability to design and implement security controls within CI/CD pipelines
• Proficiency in at least one programming or scripting language for automation
• Solid understanding of the Software Development Life Cycle (SDLC)
• Experience applying security testing and controls within CI/CD pipelines
• Familiarity with cloud-native technologies, including containerization and orchestration
• Demonstrated experience leading the use of enterprise-authorized AI-assisted software development tools
• Strong understanding of responsible AI use in engineering workflows

Preferred Qualifications

• Experience in platform security, DevSecOps, or engineering-led security teams
• Familiarity with security tools such as Snyk and Wiz
• Knowledge of software supply chain security concepts (SBOM, SLSA)
• Cloud certifications, preferably GCP
• Experience operating in large-scale enterprise environments within regulated industries

About the Company

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors.