Sr Lead Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

JPMorganChase · 1 day ago

Sr Lead Security Engineer

JPMorgan Chase is one of the oldest financial institutions, offering innovative financial solutions to millions of clients. As a Senior Lead Security Engineer within Cybersecurity and Technology Controls, you will design and implement advanced security solutions while collaborating with engineering teams to enhance the organization's security posture against evolving threats.

Asset ManagementBankingFinancial Services
check
Growth Opportunities
check
H1B Sponsor Likelynote

Responsibilities

Independently design, build, and implement advanced security solutions across cloud, hybrid, and on-prem environments, ensuring alignment with the latest industry best practices and regulatory requirements
Actively write code, develop automation, and integrate security controls throughout the software development lifecycle, collaborating with engineering teams to embed security from ideation to deployment
Facilitate security requirements clarification for multiple networks to enable multi-level security that satisfies organizational needs
Conduct hands-on threat hunting and vulnerability assessments, leveraging automation and modern security tools to identify and mitigate risks before they impact the business. Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
Drive adoption and direct implementation of emerging cybersecurity technologies (e.g., zero trust architectures, container security, AI/ML-driven security analytics) to enhance the organization’s security posture. Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events
Utilize a deep understanding of the threat landscape and risk to build security into products and new features. Mentor and provide technical guidance to junior engineers through code reviews and knowledge sharing, while remaining an individual contributor
Collaborate cross-functionally with product, infrastructure, and business teams to ensure security requirements are understood, prioritized, and implemented effectively. Stay abreast of the latest cybersecurity trends, threat intelligence, and attack techniques, and translate insights into actionable improvements for the organization
Develop and maintain incident response playbooks, and lead post-incident reviews to drive continuous improvement from a technical perspective. Represent the organization in external security forums, conferences, or working groups as a technical expert as needed
Actively contribute to an inclusive team environment by mentoring and supporting diverse perspectives

Qualification

Cloud security solutionsThreat modelingProgramming languagesSecure software developmentCI/CD pipelinesVersion control systemsSecurity automationData protection regulationsAnalytical skillsCommunication skillsMentoring

Required

Formal training or certification on software engineering concepts and 5+ years of applied experience
Proven track record in hands-on design, development, and deployment of enterprise-grade security solutions in public cloud environments (AWS, GCP, Azure), with direct experience integrating security controls into cloud-native architectures. Demonstrated ability to perform comprehensive threat modeling and risk assessments for applications, systems, and architectures using frameworks such as STRIDE, DREAD, or PASTA
Advanced proficiency in at least one modern programming language (e.g., Python, C/C#, Go, Java) and scripting for automation and security tooling, with a focus on building and deploying solutions
Deep understanding of secure software development practices, including code review, static/dynamic analysis, and vulnerability remediation across multiple technology domains (cloud, AI/ML, mobile, etc.). Experience implementing and managing CI/CD pipelines (e.g., Jenkins, GitHub Actions) with integrated security testing and controls
Expertise in version control systems (e.g., Git, BitBucket) and agile work management tools (e.g., Jira), with a focus on collaborative, cross-functional engineering environments
Ability to independently solve complex design and functionality challenges, proactively identifying and mitigating security risks with minimal oversight
Experience working with vendors to assess the sufficiency of their security practices and controls to meet industry standards. Strong analytical and communication skills, with the ability to translate technical security requirements into actionable engineering tasks and clear documentation

Preferred

Demonstrated experience with modern security engineering practices, such as infrastructure as code (IaC), DevSecOps, and automated security testing. Relevant advanced certifications (e.g., CISSP, CCSP, AWS Certified Security Specialty, GIAC, OSCP) are highly desirable
Hands-on experience with cloud-native security tools (e.g., AWS Security Hub, Azure Sentinel, GCP Security Command Center) and container orchestration platforms (e.g., Kubernetes). Experience with security automation and orchestration using tools like Terraform, Ansible, or custom scripting
Active participation in the cybersecurity community, such as contributing to open-source projects, attending or speaking at conferences, or publishing research. Experience implementing zero trust architectures, micro-segmentation, or advanced identity and access management solutions
Strong understanding of privacy and data protection regulations (e.g., GDPR, CCPA) and their impact on security engineering. Experience within Cyber Security is preferred with a good understanding of industry frameworks like MITRE ATT&CK, NIST, CIS, etc
Excellent communication and presentation skills, with the ability to convey complex security concepts to technical and non-technical audiences. Prior experience in highly regulated industries (finance, healthcare, etc.). Willingness to learn and drive to excel

Benefits

Comprehensive health care coverage
On-site health and wellness centers
A retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Company

JPMorganChase

company-logo
With a history tracing its roots to 1799 in New York City, JPMorganChase is one of the world's oldest, largest, and best-known financial institutions—carrying forth the innovative spirit of our heritage firms in global operations across 100 markets.

H1B Sponsorship

JPMorganChase has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (3471)
2024 (3469)
2023 (3395)
2022 (3594)
2021 (2515)
2020 (2495)

Funding

Current Stage
Public Company
Total Funding
unknown
1998-02-01IPO

Leadership Team

leader-logo
Allison Beer
CEO of Card Services and Connected Commerce
linkedin
leader-logo
Dan Mendelson
CEO, Morgan Health
linkedin
Company data provided by crunchbase