Lead Security Engineer - Dotnet Core, Docker, Kubernetes

JOB DESCRIPTION

Join JPMorgan

Chase's Cybersecurity Technology & Controls team and bring your security engineering expertise to an organization where your work directly protects one of the world's most complex and innovative financial institutions. As a Lead Security Engineer, you will work at the intersection of security, modern software development, and artificial intelligence â building solutions that matter at a global scale. Here, your contributions will shape the security posture of the firm while advancing your career alongside some of the most talented engineers in the industry.

As a Lead Security Engineer at JPMorgan

Chase within Cybersecurity Technology & Controls, you will serve as a seasoned contributor on a team dedicated to delivering secure, high-quality software solutions that prevent misuse, circumvention, and malicious behavior across the firm. You will apply your deep technical expertise to design and build tamper-proof, audit-defensible security solutions across multiple technology domains in support of the firm's business objectives. This is an opportunity to make a meaningful impact by combining strong engineering fundamentals with cutting‑edge AI‑assisted development practices in a collaborative, inclusive environment that values growth, innovation, and accountability.

• Design and deliver enterprise‑scale security engineering solutions, applying deep knowledge of existing security patterns to satisfy requirements for internal product, platform, and application owners
• Develop secure, high‑quality production code and maintain algorithms that operate synchronously with appropriate systems, ensuring reliability and integrity at scale.
• Uses enterprise‑authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Apply specialized vulnerability scanning and analysis tools to correlate incident data, identify threats, and summarize the probability and impact of security risks and proactively identify hidden problems and patterns within systems and use those insights to drive measurable improvements to coding hygiene and system architecture
• Produce architecture and design artifacts for complex applications, ensuring design constraints are met throughout the engineering lifecycle
• Leverage AI‑assisted development tools such as Git Hub Copilot to accelerate secure software delivery, including code refactoring, test generation, and code review support, while maintaining secure coding standards and developer accountability
• Support the delivery of agentic AI solutions, including threat modeling of agent behaviors, defining guardrails, and implementing approval and audit logging controls where appropriate
• Lead continuity‑related awareness, training, educational activities, and exercises to strengthen the team's security readiness
• Applies reuse‑first, AI‑assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

• Formal training or certification on security engineering concepts and 5+ years applied experience
• Proficiency in C# on .NET 6 or later and SQL Server/T‑SQL for enterprise application development
• Solid understanding of the Software Development Life Cycle and hands‑on experience with version control and pipeline tools such as Git, Bitbucket, Git Hub, or Jenkins
• Strong working knowledge of information and network security, IT risk management, and architectural concepts and patterns
• Demonstrated understanding of agile methodologies, continuous integration and delivery practices, and application resiliency principles
• Experience applying specialized development and security tools such as Visual Studio and code quality analysis platforms.
• Demonstrated experience using enterprise‑authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability…