Lead Security Engineer - Platform Engineer - Endpoint Security

Join a team that protects one of the world's most complex technology environments — not by writing policy, but by building the software and platforms that make security scale. At JPMorgan

Chase, engineers like you have the opportunity to ship production code that runs at genuinely massive scale, solve hard problems across a global endpoint estate, and grow your craft alongside some of the most talented engineers in financial services.

As a Lead Security Engineer at JPMorgan

Chase within the Cybersecurity and Technology Controls — Employee Compute team, you will serve as the technical anchor for a portfolio of high-impact endpoint security platforms and automation programs spanning hundreds of thousands of Mac, Windows, Linux, and virtual desktop endpoints. You will set technical direction, drive day-to-day engineering execution, and raise the bar through design and code reviews — all while remaining hands‑on in the code.

This is a senior individual contributor role for an engineer who leads through technical excellence and delivery, not through a management hierarchy.

Our team lives at the intersection of Dev Ops, platform engineering, and full‑stack development. You will build and operate systems that govern endpoint authentication, binary execution controls, and policy deployment automation — replacing brittle manual processes with auditable, resilient pipelines built on Git Ops principles. If you want your work to matter and to run everywhere, this is the role for you.

• Design, build, and ship production-quality software across Mac, Windows, Linux, and virtual desktop environments, serving as the primary technical contributor for a portfolio of endpoint security platforms
• Architect and operate a managed binary allow listing platform deployed via infrastructure-as-code in a private cloud environment, including automation that generates per-binary rules at application-packaging time
• Develop and maintain cross‑platform endpoint authentication tooling — written in a compiled language — that enables applications to authenticate through enterprise proxy infrastructure, including upcoming support for containerized deployment
• Modernize system policy deployment across Windows and virtual desktop environments using Git Ops principles, building automated pipelines that scan, grade, and deploy changes in a controlled, auditable manner
• Drive technical direction and day‑to‑day execution across the team's engineering portfolio, ensuring delivery against milestones while maintaining high standards for code quality, security, and resilience
• Conduct rigorous design and code reviews, mentoring associate engineers and elevating the technical capabilities of the team through hands‑on guidance
• Identify manual, high‑overhead processes and architect automation solutions that eliminate operational toil and scale across the firm's endpoint estate
• Collaborate cross‑functionally with application teams, infrastructure, and security stakeholders to ensure platforms are consumable, audit‑defensible, and aligned to enterprise standards
• Apply secure development practices throughout the full software development lifecycle, designing controls that are tamper‑resistant and hold up to regulatory scrutiny

• Formal training or certification on security engineering concepts and 5+ years applied experience
• Advanced proficiency in one or more major programming languages such as Python, Java, JavaScript/Type Script, Go, Rust, or C++, with a demonstrated ability to build and ship production software
• Hands‑on enterprise experience managing at least two of the following endpoint platforms:
  Mac, Windows, virtual desktop infrastructure, or Linux
• Proven experience with containers (Docker, Kubernetes), public cloud platforms, and infrastructure‑as‑code tooling
• Proficiency across the full software development lifecycle, including CI/CD pipelines, Git Ops workflows, and automated testing practices
• Working knowledge of secure development practices with the ability to design, build, and operate controls that are audit‑defensible and tamper‑resistant
• Demonstrated ability to decompose complex,…