Security Engineer III

Support end-to-end PCI assessments, manage evidence, and drive compliance outcomes across a global cybersecurity team.

We have an exciting and rewarding opportunity for you to take your software engineering career to the next level. As a Software Engineer III at JPMorganChase within the Corporate Technology Human Resources Engineering team, you will be an integral part of a team that designs and builds security enhancements to deliver software solutions that satisfy functional and user requirements for the Oracle Human Capital Management (HCM) platform. You will work closely with architects, software engineers, solutions engineers, and development and operations teams to provide technical support, security architecture, and security assurance services across the firm's HCM platform. As a core technical contributor, you will carry out critical technology solutions using tamper-proof, audit-defensible methods across multiple technical areas and business functions — with the added dimension of operational HCM security support. Job responsibilities Manage phased Oracle HCM implementations supporting integrations with downstream applications and provide ongoing production support for modules released into live environments Design and execute creative security solutions including function security, data security, areas of responsibility security, personalization, role provisioning, and location-based access control Develop secure, high-quality production code and review and debug code written by other engineers, ensuring adherence to established standards and best practices Lead and contribute to security projects centered on application development and deployment, raising the value of the HCM platform across the organization Configure Oracle HCM security including reporting, role and access defect resolution, Segregation of Duties (SOD) analysis, and continuous development and integration Partner with stakeholders and business leaders to understand security needs, recommend business modifications during periods of vulnerability, and support informed decision-making Minimize security vulnerabilities by following industry insights and regulatory requirements to continuously evolve security protocols and assess the effectiveness of current controls Maintain and develop security documentation and configuration workbooks to support audit-defensible processes and organizational knowledge Collaborate within large, cross-functional teams following Software Development Lifecycle and agile best practices to achieve organizational goals. Required qualifications, capabilities, and skills Formal training or certification on software engineering concepts and 3+ years applied experience 3+ years of experience troubleshooting, resolving, and maintaining information technology services in a large-scale technology environment Hands-on experience with Oracle HCM application security configuration including role building, access defect resolution, and identity and access management (IAM) Experience managing HCM applications or infrastructure both on-premises and in public cloud environments Proficiency in data analysis and engineering using tools such as SQL, PL/SQL, or Python Working knowledge of REST APIs, Kafka, JavaScript, HTML, and XML Experience with cloud services including Oracle HCM and Amazon Web Services (AWS), including Software as a Service (SaaS) security protocols Proficiency in observability, monitoring tools, and techniques for production environment support Experience managing projects using agile methodologies and tools such as Jira or Microsoft Project Preferred qualifications, capabilities, and skills Experience crafting functional and technical designs and documentation for Oracle HCM data conversions, interfaces, and customized reporting Familiarity with optimizing processes and assessing risks and controls within the identity and access management space Experience leveraging artificial intelligence and machine learning to support business decisions and enhance engineering outcomes Knowledge of governmental regulations and industry frameworks related to information security and access governance Demonstrated ability to work across diverse stakeholder groups including technical teams, architects, and non-technical business partners. # #CTC