Lead Security Engineer - Unix/Linux/Observability

Salary: $61,000 - 101,000 per year Requirements:

• Formal security engineering training or certification, with at least 5 years of applied experience
• Hands-on Hardware Security Module (HSM) engineering experience, including architecture and design of highly available infrastructure, disaster recovery, and business continuity strategies
• Experience with network security, firewalls, secure-room operations, and key ceremonies
• Strong technical troubleshooting skills and enterprise Linux and Unix administration experience
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
• Experience with infrastructure automation tools such as Terraform
• Hands-on experience with OpenSSL and certificate-based authentication
• Experience using enterprise-authorized AI capabilities in security engineering workflows, with careful validation and awareness of data sensitivity
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring security, resiliency, and auditability expectations are met
• Preferred: Experience with Splunk or equivalent infrastructure monitoring and troubleshooting platforms
• Preferred: Knowledge of payment processes and business resiliency as applied to infrastructure design
• Preferred: HSM platform certifications, such as Thales or FutureX credentials
• Preferred: Understanding of cryptographic principles, key management, confidential computing, and secure hardware operations

• Lead the architecture, design, and documentation of complex HSM and cryptographic infrastructure, aligning solutions with business, resiliency, and security requirements
• Design, deploy, configure, integrate, and manage HSM solutions throughout their lifecycle across Thales and FutureX platforms
• Create and maintain architecture diagrams, system documentation, and operational runbooks
• Work with cross-functional teams to establish infrastructure standards, best practices, and security controls consistent with firm policies and industry regulations
• Oversee HSM infrastructure migrations, upgrades, and consolidations while minimizing disruption and maintaining security
• Advise on cryptographic key management, secure storage, confidential computing, and compliance with standards such as PCI DSS and FIPS
• Troubleshoot infrastructure and HSM issues, conduct root cause analysis, and implement corrective actions using monitoring tools
• Participate in risk assessments, audits, and incident response for infrastructure and HSM environments
• Apply knowledge of payment processes and business resiliency to infrastructure design and operational decisions
• Use enterprise-authorized AI tools to support threat modeling, vulnerability analysis, and security documentation, validating outputs and handling sensitive information appropriately
• Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to improve security testing and control validation while maintaining traceability, auditability, resiliency, and security

• AI
• Hardware
• HSM
• Support
• Linux
• Network
• Security
• Splunk
• Terraform
• Unix
• Marketing

More:

We are hiring a Lead Security Engineer for our Cybersecurity & Technology Controls team at JPMorgan Chase. In this role, you will help protect critical payment and cryptographic operations by supporting secure, scalable, and resilient infrastructure, working with experts and contributing to secure-infrastructure innovation in a complex, high-stakes environment. We are one of the worlds longstanding financial institutions, serving consumers, small businesses, and corporate, institutional, and government clients across financial services. Our Corporate Functions teams support the success of our businesses, clients, customers, and employees. We offer a competitive total rewards package, with compensation based on role, experience, skills, and location; eligible roles may also receive incentive compensation. Benefits, subject to eligibility, include health care coverage, on-site wellness centers, retirement savings, backup childcare, tuition reimbursement, mental health support, and financial coaching. We value diversity and inclusion and provide reasonable accommodations for applicants and employees.

last updated 42 week of 2026