Sr Lead Security Engineer - Workforce

Salary: $61,000 - 101,000 per year Requirements:

• We need 5+ years of applied training or certification in software engineering concepts.
• We want proven experience designing, developing, and deploying enterprise-grade security solutions in public cloud environments such as AWS, GCP, or Azure.
• We need demonstrated capability in threat modeling and risk assessments for applications, systems, and architectures using frameworks such as STRIDE, DREAD, or PASTA.
• We require advanced proficiency in at least one modern programming language such as Python, C/C#, Go, or Java, along with scripting for automation and security tooling.
• We need a strong understanding of secure software development practices, including code review, static and dynamic analysis, and vulnerability remediation across cloud, AI/ML, mobile, and other domains.
• We expect experience implementing and managing CI/CD pipelines such as Jenkins or GitHub Actions with integrated security testing and controls.
• We need expertise in version control tools such as Git or Bitbucket and agile work management platforms such as Jira.
• We want the ability to solve complex design and functionality issues independently while proactively identifying and reducing security risk.
• We need experience working with vendors to evaluate whether their security practices and controls meet industry standards.
• We require strong analytical and communication skills, including the ability to turn technical security requirements into actionable engineering tasks and clear documentation.
• Preferred: experience with security engineering practices such as infrastructure as code, DevSecOps, and automated security testing.
• Preferred: hands-on experience with cloud-native security tools and container orchestration platforms such as Kubernetes.
• Preferred: participation in the cybersecurity community through open-source contributions, conferences, or research.
• Preferred: experience implementing zero trust architectures, micro-segmentation, or advanced identity and access management solutions.
• Preferred: understanding of privacy and data protection regulations such as GDPR and CCPA.
• Preferred: experience in cybersecurity with knowledge of frameworks such as MITRE ATT&CK, NIST, and CIS.
• Preferred: relevant advanced certifications such as CISSP, CCSP, AWS Certified Security Specialty, GIAC, or OSCP.
• Preferred: excellent communication and presentation skills for both technical and non-technical audiences.
• Preferred: experience with security automation and orchestration using tools such as Terraform, Ansible, or custom scripting.
• Preferred: prior experience in highly regulated industries such as finance or healthcare.
• Preferred: willingness to learn and a drive to excel.

• We independently design, build, and implement advanced security solutions across cloud, hybrid, and on-premises environments in line with industry best practices and regulatory needs.
• We write code, build automation, and embed security controls throughout the software development lifecycle in partnership with engineering teams.
• We help clarify security requirements across multiple networks so multi-level security can meet organizational needs.
• We drive the adoption and implementation of emerging cybersecurity technologies such as zero trust, container security, and AI/ML-based security analytics.
• We triage threats using risk assessments and help manage resources to address the impact of disruptive events.
• We use our understanding of the threat landscape and risk to build security into products and new features.
• We mentor junior engineers through code reviews and knowledge sharing while remaining individual contributors.
• We work cross-functionally with product, infrastructure, and business teams to ensure security requirements are understood, prioritized, and delivered effectively.
• We stay current on cybersecurity trends, threat intelligence, and attack techniques, and translate those insights into practical improvements.
• We develop and maintain incident response playbooks and lead post-incident reviews to support continuous technical improvement.
• We contribute to an inclusive team culture by mentoring and supporting diverse perspectives.

• AI
• AWS
• Ansible
• Azure
• BitBucket
• C#
• CI/CD
• Cloud
• DevSecOps
• Excel
• GCP
• Git
• GitHub
• Support
• JIRA
• Java
• Jenkins
• Kubernetes
• Marketing
• Mobile
• Python
• Security
• Terraform

More:

hackajob is collaborating with J.P. Morgan to connect the company with exceptional professionals for this role. At JPMorgan Chase within Cybersecurity and Technology Controls, we offer a hands-on Senior Lead Security Engineer position focused on technical delivery, solution implementation, and direct contribution to security engineering initiatives rather than people management. We provide a competitive total rewards package, with pay based on role, experience, skill set, and location, along with benefits and programs such as comprehensive health coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching, subject to eligibility. We also value diversity and inclusion and provide reasonable accommodations where needed. JPMorganChase is one of the oldest financial institutions, serving consumers, small businesses, corporate, institutional, and government clients across investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management. Our Corporate Functions team supports finance, risk, human resources, marketing, and other essential areas that help set our businesses, clients, customers, and employees up for success.

last updated 41 week of 2026