Lead Security Engineer - Python
Listed on 2026-08-17
-
Security
Cybersecurity
Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions.
As a Lead Security Engineer at JPMorgan
Chase within the CTC, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.
- Execute creative security solutions through design, development, and technical troubleshooting, thinking beyond routine or conventional approaches to build solutions and break down complex technical problems.
- Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
- Develop secure, high-quality production code, and review and debug code written by others.
- Minimize security vulnerabilities by applying industry insights and governmental regulations to continuously evolve security protocols; create processes to determine control effectiveness; and conduct discovery, vulnerability assessments, penetration testing, and threat scenario analysis to identify and assess vulnerabilities.
- Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability.
- Apply reuse-first, AI-assisted practices within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment to resiliency and security expectations.
- Design and build secure Python solutions (APIs, microservices, automation tools, security utilities) using secure-by-design patterns, least privilege, and defense-in-depth.
- Perform secure code development, review, and debugging for Python and adjacent stacks (e.g., containerized workloads, CI/CD), including fixing security defects and improving engineering guardrails.
- Demonstrate expertise in cloud and Dev Ops technologies, including AWS, Google Cloud, Azure, Docker, Kubernetes, Jenkins, and Git Lab.
- Be skilled in working with databases such as MongoDB, PostgreSQL, and No
SQL systems. - Maintain a strong background in data science and AI, including deep learning, NLP, GenAI, RAG concepts, prompt engineering, and data visualization.
- Apply experience in secure coding, model validation, and data privacy.
- Exhibit excellent problem-solving, communication, and teamwork skills.
- Experience with LLM fine-tuning, prompt engineering, and multi-modal AI integration.
- Familiarity with CI/CD pipelines and automation tools.
- Knowledge of frontend frameworks such as React and Next.js.
- Certifications in AI/ML, Kubernetes, AWS, or cybersecurity.
- Exposure to cybersecurity frameworks and compliance standards.
JPMorgan
Chase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility.
These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).