Lead Security Engineer- Java, Python

Join JPMorganChase's Cybersecurity and Technology Controls organization, where the work you do directly protects one of the world's most complex and consequential technology ecosystems. Here, your engineering decisions matter — not just for the firm, but for the millions of clients and communities we serve every day. This is a place where deep technical ownership, intellectual curiosity, and a commitment to quality are celebrated and rewarded.As a Lead Security Engineer at JPMorganChase within the Cybersecurity and Technology Controls organization, you are an integral part of a team that delivers software solutions designed to prevent misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit-defensible methods across multiple technical areas and business functions. You will drive system design, engineering practices, development, and operations across services to deliver high-quality, resilient systems in private and public cloud environments.Job responsibilitiesDesign and evolve distributed systems with a focus on reliability, scalability, security, and operability across private and public cloud environmentsContribute hands-on code in Java and Python, setting the standard for design, readability, testability, and maintainabilityDevelop and maintain production-ready services using Java Spring frameworks, ensuring performance and resilience at scaleUses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.Identify and remediate architectural risks, technical debt, and systemic quality gaps before they impact productionReview design proposals and code changes for correctness, resilience, and long-term maintainabilityOwn production behavior of systems end-to-end, including reliability, performance, incident response, and post-incident improvementsChampion strong software development lifecycle practices including design reviews, testing strategy, release hygiene, and rollback planningEnsure systems continuously meet security, audit, and compliance expectations as a core part of day-to-day engineeringServe as a technical mentor and role model, elevating the craft of senior engineers across the teamApplies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.Required qualifications, capabilities, and skillsFormal training or certification on security engineering concepts and 5+ years applied experienceDemonstrated experience designing and operating cloud-native systems in production environmentsStrong proficiency in Java and/or Python with a proven track record of delivering high-quality, maintainable codeExperience designing and working with relational and NoSQL databases (e.g., DynamoDB, MongoDB) in production systems.Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity. Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.Solid understanding of software engineering best practices including automated testing, continuous integration and delivery, and release managementExperience owning production systems including incident management, on-call responsibilities, and post-incident reviewsExcellent written and verbal communication skills, with the ability to clearly articulate technical decisions to both technical and non-technical audiences.Preferred qualifications, capabilities, and skillsExperience working in regulated or highly controlled environments such as financial services, healthcare, or governmentDeep understanding of cloud and event-driven architectures and their security implicationsFamiliarity with security compliance frameworks and audit-defensible engineering practicesStrong grasp of operational excellence principles including monitoring, alerting, and observability strategiesExperience with networking concepts in cloud environments, including virtual private clouds, security groups, and traffic management#CTC JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/VeteransOur professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.Full timePosting Date: 2026-07-20